Core Concepts
Roles & Access
Who can see and do what inside each workspace.
How roles work
Every person in EasyFlow has a role. Roles are assigned when you invite someone and can be changed any time by a workspace admin. Roles control what a person can see, what they can change, and what actions they can take.
ℹSuper Admin is a platform-level role — above all workspaces. All other roles are scoped to a single workspace. A person cannot have different roles in different workspaces — they are invited to each workspace separately.
Role reference
| Role | Scope | Key permissions |
|---|---|---|
| Super Admin | All workspaces | Create workspaces, manage platform settings, view all data, set role permissions |
| Tenant Admin | One workspace | Manage team, configure ERP connections, edit workflows, view all dashboards |
| Manager | One workspace | Approve requests, view all dashboards, run flows, view reports |
| Analyst | One workspace | View all dashboards and reports, export data. No write access. |
| Operator | One workspace | Run assigned workflow steps, view their own work queue only |
Changing roles
Open Admin Portal → Users tab. Find the person and click the role badge to change it. Changes take effect the next time they load the page. Downgrading a role (e.g. Admin → Operator) immediately restricts their access.
⚠Only Tenant Admins and Super Admins can change roles. You cannot change your own role.