Roles and teams

Also known as: role-based access control, RBAC, user permissions

Roles and teams control what each user can do and see in a Workspace. Each user is assigned a role, which grants permissions, and a team, which grants access to inventory objects.

A role grants permissions such as creating policies or running automations. A team grants access to the inventory objects of selected connectors. Rencore Governance ships four built-in roles and a set of default teams (Premium and Enterprise Plans). Custom roles and teams are only available on the Enterprise Plan.

Roles decide what a user can do, teams decide which data they see. Together they let you give each group of users exactly the access it needs.

For example, a SharePoint administrator can get the Contributor role and a custom team that only sees the SharePoint and OneDrive connectors.

Click Settings, then Users & Roles, to assign roles and teams or create custom ones.

Built-in roles

• Owner manages the entire Workspace and has the highest permissions. A Workspace can have up to three Owners.
• Admin administers the Workspace and adds users, but cannot delete the Workspace or change Owners.
• Contributor creates and changes dashboards, tiles, policies and automations.
• Reader can only read.

A custom role combines any of the user permissions, grouped by area. A custom team combines the connectors and inventory objects it may see. You can also restrict which built-in actions a role may run.