Roles & Permissions
User roles and permissions in Synthreo - understand the role hierarchy for Builder, ThreoAI, and Tenant Management and how roles control feature access.
A Role defines what a user can do within each Synthreo application. Roles are hierarchical - higher roles include all permissions of lower roles. Each user is assigned one role per application.
Builder Roles
Section titled “Builder Roles”Builder has six roles, listed from most to least access:
| Role | Access Level |
|---|---|
| Account Owner | Full control including billing, settings, and account closure |
| Sysadmin | Full access except account closure |
| Admin | Full access except subscription/payment management |
| Full Power User (FPU) | Same as Admin but cannot manage team members |
| FS Restricted Power User (FS RPU) | Same as FPU but no file system management access |
| DCS Only Power User (DCS OPU) | Limited to the Data Connection System (DCS) only |
ThreoAI Roles
Section titled “ThreoAI Roles”ThreoAI uses a single role:
| Role | Notes |
|---|---|
| Admin | All ThreoAI users have this role. ThreoAI is one-account-per-user, so role differentiation is not needed. |
Tenant Management Roles
Section titled “Tenant Management Roles”| Role | Notes |
|---|---|
| Owner | Highest role - currently identical to Admin |
| Admin | Full administrative access |
How Roles Work with Permissions
Section titled “How Roles Work with Permissions”Roles and app permissions are separate concepts:
- App permissions control which tools a user can access (ThreoAI, Builder, Tenant Management)
- Roles control what a user can do within each tool
A user needs both an app permission and an appropriate role to access features in a given tool.
Troubleshooting
Section titled “Troubleshooting”| Issue | Cause | Fix |
|---|---|---|
| User has Builder access but cannot manage team members | Assigned FPU role instead of Admin | Update the user’s Builder role to Admin or higher |
| User can log in to Tenant Management but cannot make changes | Assigned an insufficient role | Verify the user has Owner or Admin role in Tenant Management |
| User cannot access DCS in Builder | Role is below DCS OPU | Ensure the user has at least DCS OPU assigned |
Can a user have different roles in different applications? Yes. Roles are assigned per-application. A user can be an Account Owner in Builder while holding Admin in Tenant Management at the same time.
How do I change a user’s role? Navigate to the user in Tenant Management, expand their permissions, and update the role for the relevant application. See Managing Permissions for step-by-step instructions.
What role should I assign to a new Builder user who only needs to build and test agents? The Full Power User (FPU) role is appropriate for users who need to build and test agents but should not manage team members or billing.