Platform Administration & Permissions
Synthreo platform administration: what ThreoAI, Builder, and Canopy do, how app permissions control access, and where platform settings live in Canopy.
Synthreo consists of three core tools. Each user can be granted access to one or more of these tools through app permissions assigned in Canopy.
In Canopy, Platform Admin holds per-organization model access, the company system prompt, sensitive data, and the MCP and skill catalogs (see Platform Admin). Platform-wide feature toggles live in a separate root-only AI Configuration area that is managed by Synthreo and is not covered in these docs.
ThreoAI
Section titled “ThreoAI”ThreoAI is the AI chat interface for your organization. It provides conversational access to large language models (GPT-5, Claude, etc.) and supports Experts, file uploads, model comparison, projects, and a catalog of pre-built AI Agents.
URL: https://threo.synthreo.ai
What users can do:
- Chat with AI models
- Create and use Experts
- Upload and analyze files
- Compare model outputs side-by-side
- Access pre-built AI Agents from the Agents catalog
Builder
Section titled “Builder”Builder is a no-code/low-code tool for creating AI agents and automated workflows. Users connect nodes on a visual canvas to build pipelines that process data, call LLMs, integrate with external systems, and produce outputs.
Pylon, the next-generation successor to Builder, is rolling out alongside it; Builder remains supported for existing agents and workflows.
URL: https://builder.synthreo.ai
What users can do:
- Design AI agent workflows on a visual canvas
- Configure LLM nodes, integrations, and data transformations
- Test and debug agents with the built-in debugger
- Schedule agents to run automatically
- Expose agents via API or connect them to ThreoAI
Canopy
Section titled “Canopy”Canopy is the administrative console for the Synthreo platform. It controls who has access to what across all three tools.
URL: https://canopy.synthreo.ai
What admins can do:
- Create and manage customer tenants (multi-tenant hierarchy)
- Add, edit, and remove users
- Assign app permissions (ThreoAI, Builder, Canopy)
- Configure AI models and system prompts
- Access child-customer apps for support via Delegate Login and Sign In As
App Permissions
Section titled “App Permissions”Every user in Synthreo is assigned one or more app permissions that control which tools they can access:
| Permission | Grants Access To | Auto-Granted? |
|---|---|---|
| ThreoAI | AI chat, Experts, Agents, Projects | Yes - all new users get this automatically |
| Builder | Agent canvas, node configuration, testing, API | No - must be explicitly granted |
| Canopy | Admin console, user/customer management | No - must be explicitly granted |
Permissions are managed per-user in the Canopy portal. See Adding a New User and Managing Permissions for step-by-step guides.
Troubleshooting
Section titled “Troubleshooting”| Issue | Cause | Fix |
|---|---|---|
| User cannot access ThreoAI | The account is disabled or setup is not finished | Confirm the account is active and the user has completed setup |
| User cannot see Builder | Builder permission not granted | Grant the Builder permission and assign an appropriate role |
| User cannot log in to Canopy | Canopy permission not assigned | Assign the Canopy permission with Owner or Admin role |
Can a user have all three app permissions at the same time? Yes. A user can be granted ThreoAI, Builder, and Canopy permissions simultaneously. They will be able to access all three tools using the same login credentials.
Does granting Builder access automatically grant ThreoAI access? Every user already has ThreoAI as their locked base permission, so there is nothing to grant there - Builder is simply added on top. Builder and Canopy are the permissions you assign explicitly.
Can I remove the ThreoAI permission from a user? No. ThreoAI is the baseline app access every user receives, and it is not toggled off per user. To revoke someone’s access, disable or remove their account. Builder and Canopy are the permissions you grant or remove individually.

