Default Roles
This page provides detailed insights into the individual permissions associated with the default roles available in Appsmith.
Organization Administrator Role
The Organization Administrator Role (previously Instance Administrator role) operates at the highest level within the platform, managing organization-wide settings such as branding, GAC, licenses, provisioning, and audit logs.
Permissions
To perform different tasks, the Organization Administrator role in Appsmith has the following permissions:
For more information about each permission, see Permissions.
Limitations
Despite having extensive permissions, the Organization Administrator role in Appsmith cannot perform the following tasks:
- Inability to execute actions that require workspace-level permissions, such as creating, editing, or deleting apps within a workspace.
Default Role for All Users
Default Role for All Users helps you assign some default permissions to all users across your Appsmith instance. Initially, the role has permission to create workspace. For all other permissions, instance administrators can fully customize this role according to your business needs. For more information, see How to provide default access to all users.
On the Roles screen, the Assignees column shows All users for this role. On the role page, the Assignees tab shows Assigned to all users instead of listing individual users, because membership is implicit for every user in the instance. Configure permissions on the Permissions tab. For more information about viewing assignees on other roles, see View role assignees.
Administrator Role for Workspace
Administrator Role assigned to a workspace grants full control over all entities within a workspace, allowing users to perform actions such as creating, editing, and deleting entities.
Permissions
To perform different tasks, the Administrator - Workspace role in Appsmith has the following permissions:
For more information about each permission, see Permissions.
Limitations
Workspace Administrators do have some limitations; they lack authority to create workspaces, view audit logs, or manage roles, groups, or users.
Developer Role for Workspace
The Developer role grants users extensive access to different resources within a workspace, including apps, pages, queries, datasources, and environments.
Permissions
The Developer role enables users to create, edit, and delete apps within a workspace. They also have control over managing pages, queries, datasources, and environments. These responsibilities are governed by the permissions allocated to the Developer - Workspace role in Appsmith, as shown below:
For more information about each permission, see Permissions.
Limitations
Workspace Developers have the same limitations as Workspace Administrators and, in addition, cannot make apps public or export them.
App Viewer Role for Workspace
The App Viewer - Workspace Role is specific to each workspace and provides view-only access to apps within that workspace.
Permissions
The workspace App Viewer role enables users to view apps, governed by the permissions allocated to the App Viewer - Workspace role in Appsmith, as shown below:
For more information about each permission, see Permissions.
Limitations
Workspace App Viewers do not have permission to create, edit, or delete apps that is it does not include permissions to manage apps within workspace.
Developer Role for Application
The Developer role for application grants users extensive access to different resources within the given app, including pages, queries, datasources, and environments. When a user is invited to an app and provided developer access, this role is created if not already present.
Permissions
The Developer role enables users to manage pages, queries, datasources, and environments within the given app. These responsibilities are governed by the permissions allocated to the Developer - Application role in Appsmith, as shown below:
Limitations
Application Developers do have some constraints; they lack permissions to create applications in workspace, view audit logs, manage workflows, make apps public or export apps, and manage roles, groups, or users.
App Viewer Role for Application
The App Viewer for Application Role is specific to each workspace and provides view-only access to apps within that application.
Permissions
The App Viewer role enables users to view pages, governed by the permissions allocated to the App Viewer - Application role in Appsmith, as shown below:
Limitations
Application App Viewers do not have permission to create, edit, or delete pages, queries in the app and does not include permissions to manage apps within workspace.