Managing Permissions

This guide explains how to manage application permissions for users in Synthreo’s Tenant Management portal. Permissions control which Synthreo tools a user can access.

---

Understanding Permissions

Each user can be granted access to one or more Synthreo applications:

Permission	What It Grants
ThreoAI	Access to the AI chat interface, Custom GPTs, Agents, and Projects
Builder	Access to the AI agent workflow canvas, node configuration, and testing
Tenant Management	Access to the admin console for user and customer management

Note

All new users automatically receive ThreoAI permission. Builder and Tenant Management permissions must be granted manually.

---

Viewing a User’s Permissions

Parent Tenant Users

1. Go to https://admin.synthreo.ai
2. Click User Management in the left sidebar
3. Locate the user in the list
4. Click the expand arrow next to the user to see their current application permissions

Child Customer Users

1. Click Customers in the left sidebar
2. Find the customer and click the ellipsis (three dots) to open their detail page
3. Go to the Users tab
4. Click the expand arrow next to the user to see their current permissions

---

Adding a Permission

To grant a user access to an additional application:

1. Navigate to the user (parent tenant or child customer - see above)
2. Click the expand arrow to reveal their current permissions
3. Click the Add Permission button or use the permission assignment controls
4. Select the application to grant (ThreoAI, Builder, or Tenant Management)
5. Assign the appropriate role for that application:
   • Builder: Account Owner, Sysadmin, Admin, FPU, FS RPU, or DCS OPU
   • ThreoAI: Admin (only role available)
   • Tenant Management: Owner or Admin
6. Save the changes

The user will have access to the new application on their next login.

---

Removing a Permission

To revoke a user’s access to an application:

1. Navigate to the user’s permission list
2. Locate the permission you want to remove
3. Use the delete or toggle control to remove the permission
4. Confirm the removal

Caution

Removing a user’s last permission does not delete their account. The user will still exist but won’t be able to access any Synthreo applications until a permission is re-granted.

---

Changing a User’s Role

To update the role assigned within an application permission:

1. Navigate to the user’s permission list
2. Locate the permission entry for the application you want to update
3. Click Edit or the role control next to the permission
4. Select the new role from the dropdown
5. Save the changes

The role change takes effect on the user’s next login or page refresh.

---

Permission Inheritance

Permissions are scoped to the tenant where they are assigned:

• A permission granted at the parent tenant level applies to the parent tenant only
• A permission granted at a child customer level applies to that child customer only
• Permissions do not automatically cascade from parent to child tenants

---

Troubleshooting

Issue	Cause	Fix
Add Permission button not visible	Insufficient administrative role	Verify your account has Owner or Admin role in Tenant Management
Permission change not reflected for the user	User is still logged in with a cached session	Ask the user to log out and log back in to pick up the updated permissions
Cannot remove a permission	No confirmation dialog appearing	Ensure pop-ups are allowed for the Tenant Management site
User removed from all permissions but account still exists	Permissions and accounts are separate	The account remains until explicitly deleted; re-grant permissions to restore access

---

FAQs

Can I grant Builder permission to a user without granting ThreoAI? Yes. Each permission is independent. You can assign Builder-only access if ThreoAI is not needed for that user.

What role should I assign when granting Builder access to a new user? For most users, start with Full Power User (FPU). This gives broad build-and-test access without the ability to manage team members or billing. See Roles & Permissions for the full role comparison.

Does the user need to do anything after permissions are changed? The user should log out and log back in to pick up any permission changes. Changes to an already-open session may not take effect until the next login.

Can I grant Tenant Management access to a child-customer user? Yes. Navigate to the child customer’s user list, expand the user’s permissions, and grant Tenant Management access. The user will then be able to administer their own child tenant.

---

Related Guides

• Adding a New User - create user accounts
• Roles & Permissions - understand the role hierarchy
• Platform Tools - what each application does