Permissions & Role-Based Access Control

TyneBase uses RBAC to manage what users can do in your workspace.

Role Hierarchy

Roles follow a hierarchical structure where higher roles inherit all permissions of lower roles:

Admin → Editor → Contributor → View Only

Role Capabilities

Capability	View Only	Contributor	Editor	Admin
Read documents	✅	✅	✅	✅
Create drafts	❌	✅	✅	✅
Edit own docs	❌	✅	✅	✅
Edit any doc	❌	❌	✅	✅
Publish	❌	❌	✅	✅
Delete docs	❌	❌	Own only	✅
Use AI features	❌	✅	✅	✅
View audit	❌	❌	✅	✅
Manage users	❌	❌	❌	✅
Workspace settings	❌	❌	❌	✅

Assigning Roles

During Invitation

When inviting users, select their role:

1. Go to Settings → Users
2. Click + Invite Users
3. Enter email addresses
4. Select role from dropdown
5. Send invitations

Changing Roles

Modify existing user roles:

1. Find user in Settings → Users
2. Click user row
3. Select new role
4. Confirm change

Document Sharing

Share documents with specific users:

1. Open document
2. Click Share button
3. Add users by email
4. Set access level
5. Save

Audit Trail

All permission changes are logged:

• Who changed what
• Previous and new values
• Timestamp
• IP address

View in Settings → Audit Logs.