Roles & Permissions
User roles and permissions in Synthreo. Understand the role hierarchy across Builder, ThreoAI, and Canopy, and how each role controls access to features.
A Role defines what a user can do within each Synthreo application. Roles are hierarchical - higher roles include all permissions of lower roles. Each user is assigned one role per application.
Builder Roles
Section titled “Builder Roles”Builder has six roles, listed from most to least access:
| Role | Access Level |
|---|---|
| Account Owner | Full control including billing, settings, and account closure |
| Sysadmin | Full access except account closure |
| Admin | Full access except subscription/payment management |
| Full Power User (FPU) | Same as Admin but cannot manage team members |
| FS Restricted Power User (FS RPU) | Same as FPU but no file system management access |
| DCS Only Power User (DCS OPU) | Limited to the Data Connection System (DCS) only |
ThreoAI Roles
Section titled “ThreoAI Roles”ThreoAI uses a single role:
| Role | Notes |
|---|---|
| Admin | All ThreoAI users have this role. ThreoAI is one-account-per-user, so role differentiation is not needed. |
Canopy Roles
Section titled “Canopy Roles”| Role | Notes |
|---|---|
| Owner | Highest role - currently identical to Admin |
| Admin | Full administrative access |
How Roles Work with Permissions
Section titled “How Roles Work with Permissions”Roles and app permissions are separate concepts:
- App permissions control which tools a user can access (ThreoAI, Builder, Canopy)
- Roles control what a user can do within each tool
A user needs both an app permission and an appropriate role to access features in a given tool.
Troubleshooting
Section titled “Troubleshooting”| Issue | Cause | Fix |
|---|---|---|
| User has Builder access but cannot manage team members | Assigned FPU role instead of Admin | Update the user’s Builder role to Admin or higher |
| User can log in to Canopy but cannot make changes | Assigned an insufficient role | Verify the user has Owner or Admin role in Canopy |
| User cannot access DCS in Builder | Role is below DCS OPU | Ensure the user has at least DCS OPU assigned |
Can a user have different roles in different applications? Yes. Roles are assigned per-application. A user can be an Account Owner in Builder while holding Admin in Canopy at the same time.
How do I change a user’s role? Navigate to the user in Canopy, expand their permissions, and update the role for the relevant application. See Managing Permissions for step-by-step instructions.
What role should I assign to a new Builder user who only needs to build and test agents? The Full Power User (FPU) role is appropriate for users who need to build and test agents but should not manage team members or billing.