Platform Administration & Permissions
Synthreo platform administration: what ThreoAI, Builder, and Canopy do, how app permissions control access, and where platform settings live in Canopy.
Synthreo consists of three core tools. Each user can be granted access to one or more of these tools through app permissions assigned in Canopy.
In Canopy, the platform-level controls are split across two areas: Platform Admin holds the per-organization models, vendor keys, and catalogs (see Platform Admin), and AI Configuration → System Flags holds the platform-wide feature toggles for root administrators (see AI Configuration).
ThreoAI
Section titled “ThreoAI”ThreoAI is the AI chat interface for your organization. It provides conversational access to large language models (GPT-5, Claude, etc.) and supports Experts, file uploads, model comparison, projects, and a marketplace of pre-built AI Agents.
URL: https://threo.synthreo.ai
What users can do:
- Chat with AI models
- Create and use Experts
- Upload and analyze files
- Compare model outputs side-by-side
- Access pre-built AI Agents from the marketplace
Builder
Section titled “Builder”Builder is a no-code/low-code tool for creating AI agents and automated workflows. Users connect nodes on a visual canvas to build pipelines that process data, call LLMs, integrate with external systems, and produce outputs.
URL: https://builder.synthreo.ai
What users can do:
- Design AI agent workflows on a visual canvas
- Configure LLM nodes, integrations, and data transformations
- Test and debug agents with the built-in debugger
- Schedule agents to run automatically
- Expose agents via API or connect them to ThreoAI
Canopy
Section titled “Canopy”Canopy is the administrative console for the Synthreo platform. It controls who has access to what across all three tools.
URL: https://canopy.synthreo.ai
What admins can do:
- Create and manage customer tenants (multi-tenant hierarchy)
- Add, edit, and remove users
- Assign app permissions (ThreoAI, Builder, Canopy)
- Configure AI models and system prompts
- Access child-customer apps for support via Delegate Login and Sign In As
App Permissions
Section titled “App Permissions”Every user in Synthreo is assigned one or more app permissions that control which tools they can access:
| Permission | Grants Access To | Auto-Granted? |
|---|---|---|
| ThreoAI | AI chat, Experts, Agents, Projects | Yes - all new users get this automatically |
| Builder | Agent canvas, node configuration, testing, API | No - must be explicitly granted |
| Canopy | Admin console, user/customer management | No - must be explicitly granted |
Permissions are managed per-user in the Canopy portal. See Adding a New User and Managing Permissions for step-by-step guides.
Troubleshooting
Section titled “Troubleshooting”| Issue | Cause | Fix |
|---|---|---|
| User cannot access ThreoAI | ThreoAI permission was manually removed | Re-grant ThreoAI permission in the user’s permission list |
| User cannot see Builder | Builder permission not granted | Grant the Builder permission and assign an appropriate role |
| User cannot log in to Canopy | Canopy permission not assigned | Assign the Canopy permission with Owner or Admin role |
Can a user have all three app permissions at the same time? Yes. A user can be granted ThreoAI, Builder, and Canopy permissions simultaneously. They will be able to access all three tools using the same login credentials.
Does granting Builder access automatically grant ThreoAI access? No. Each permission is independent. If a user should have both, both permissions must be assigned separately.
Can I remove the ThreoAI permission that was auto-granted? Yes. Auto-granting is a convenience for new users, not a locked setting. You can remove ThreoAI access from a user through the Managing Permissions workflow at any time.