Roles and Permissions

Agent QA uses four roles. Each role grants a specific set of permissions that control what a user can see and do.

10.1 Role Definitions

Role	Intended Users	Key Capabilities
Admin	AI Employee owners, QA program leads	Full control over the AI Employee — configuration, workflow, users, integrations, metrics, audit, feedback approval, and lifecycle (rename / share / enable / delete).
Manager	QA managers, operations leads	Manage users on the AI Employee, view all metrics, insights, and audit data across the team, and submit feedback. Cannot modify configuration.
Builder	Persona configurators, technical owners	Configure QA parameters, edit the workflow canvas, manage the agent list, manage integrations, submit feedback, and control the AI Employee's lifecycle (rename / share / enable).
Guest	Users without access	Has no permissions. Use this role to remove a user's access.

Permission	Admin	Manager	Builder	Guest
View AI Employee	Yes	Yes	Yes	No
View Configuration tab	Yes	No	Yes	No
View Workflow Canvas	Yes	Yes	Yes	No
Edit Workflow Canvas	Yes	No	Yes	No
Edit Agent List	Yes	No	Yes	No
View / Edit Permissions	Yes	Yes	No	No
View Metrics	Yes	Yes	No	No
View Audit	Yes	Yes	Yes	No
View Insights	Yes	Yes	No	No
Submit Feedback	Yes	Yes	Yes	No
Approve Feedback	Yes	No	No	No
Rename AI Employee	Yes	Yes	Yes	No
Share AI Employee	Yes	Yes	Yes	No
Enable / Disable AI Employee	Yes	Yes	Yes	No
Delete AI Employee	Yes	No	No	No
View Integrations	Yes	Yes	Yes	No
Add Integration	Yes	No	Yes	No

For programmatic access checks (API integrations, audit logs, and SSO claims), permissions are exposed as the following codes:

Permission Code	What It Controls	Roles
`CAN_VIEW_PERSONA`	Open the AI Employee page, view interactions, submit feedback	Admin, Manager, Builder
`CAN_EDIT_PERSONA`	Configure QA parameters, edit the agent list, manage rules	Admin, Builder
`CAN_EDIT_WORKFLOW_CANVAS`	Edit the workflow canvas	Admin, Builder
`CAN_VIEW_PERSONA_USERS`	View the user list and effective roles on the AI Employee	Admin, Manager
`CAN_VIEW_PERSONA_METRICS`	View metrics, insights, and audit data across all agents	Admin, Manager
`CAN_RENAME_PERSONA`	Rename the AI Employee	Admin, Manager, Builder
`CAN_SHARE_PERSONA`	Share the AI Employee and invite users	Admin, Manager, Builder
`CAN_CHANGE_PERSONA_STATUS`	Enable or disable the AI Employee	Admin, Manager, Builder
`CAN_DELETE_PERSONA`	Permanently delete the AI Employee	Admin
`CAN_VIEW_INTEGRATION`	View configured integrations on the AI Employee	Admin, Manager, Builder
`CAN_ADD_INTEGRATION`	Add or remove integrations on the AI Employee	Admin, Builder

For a typical Agent QA deployment:

Assign Admin to a small number of QA supervisors who own the AI Employee end-to-end.
Assign Builder to the team configuring QA rules and the workflow.
Assign Manager to operations leads who need to manage users and review performance but should not change configuration.
Use Guest to revoke a user's access without removing them from the workspace.

Last updated: Jul 3, 2026