Skip to main content
Workspaceby Aells

Security · Workspace by Aells

Let the company decide what every role and individual can do

Configure company roles, module permissions, approval authority, and per-user overrides without treating every admin identically.

Open Workspace Explore all features

Overview

How Roles & Permissions works in Workspace

Workspace starts invited users as company members and lets the company decide their role and access. Role permissions provide a reusable baseline, while per-user overrides support two people with the same role but different responsibilities.

Capabilities

A practical structure for the work

1

Company-defined roles

Create role labels and a permission baseline for the company.

2

Per-user overrides

Allow or deny a specific permission for one company member.

3

Server enforcement

Check permissions in protected pages, APIs, and server mutations rather than only hiding buttons.

4

Owner authority

Preserve company-owner control while supporting delegated operational roles.

Workflow

From setup to accountable action

  1. 1Invite the person as a company member.
  2. 2Assign the appropriate role and baseline permissions.
  3. 3Apply individual overrides for responsibilities that differ from the role.

Questions

Clear answers before setup

Can two admins have different access?

Yes. Per-user overrides can change the permissions inherited from the admin role.

Are permissions enforced only in the sidebar?

No. Protected workflows should also enforce permissions on the server.

Continue exploring Workspace

Company Policy ManagementEmployee PortalCompany Operations Panel