How permissions work
The few rules behind every permission in AxisIQ: the owner, roles, and why a person with no role can do nothing.
Permissions in AxisIQ follow a small set of rules. Once you know them, every screen in Team & Permissions makes sense.
The owner is the only special person
The person who created the workspace is the owner. The owner holds every permission, can never be removed, and shows as Owner in the People list with the note "Everything — the owner holds every permission."
There is no separate "admin" switch. If someone else needs to do everything, give them a role with Full access to everything (the Administrator template does this). That role shows up on the Roles page like any other, so you can always see who holds it.
Everyone else gets permissions from roles
- A role is a set of permissions you hand to people.
- A person can hold more than one role. What they can do is everything their roles allow, added together.
- A person with no role can sign in but cannot see or do anything. The People list flags this with a No role yet badge and a warning.
- Taking a role away, or deleting it, removes those permissions immediately.
A permission says what, and sometimes where
Each role is built app by app. For each app you pick a level, such as Can view, Can add & edit or Full control. See Permission levels by app for every level.
For finer control, such as one record type, one shared space, one form or one queue, use Advanced rules in the role editor. See Create and edit roles.
A deny always wins
If two rules disagree, a rule that says Deny beats a rule that says Allow. If nothing allows an action, the action is refused.
You can only give what you hold
Unless you are the owner, you cannot create a role, edit a role, assign someone to a role, issue a key, or invite someone into a role that grants more than you hold yourself. AxisIQ refuses with "you cannot grant access you do not hold yourself".
Only the owner can create a role for visitors who are not signed in, or switch an existing role to that setting.
What people see when they lack permission
- Apps and records you cannot read are hidden or show a "No access" message.
- Workspaces you are not a member of are not disclosed. They look as if they do not exist.
- The Ask Axis assistant can only do what the person asking is allowed to do.