Workspace membership uses five roles (lowest to highest capability for content):
| Role | Typical capabilities |
|---|---|
| viewer | View prompts and run where policy allows |
| editor | Create and edit prompts; submit for review |
| reviewer | Approve/reject lifecycle transitions; publish where allowed |
| admin | Manage members, policies (workspace), deprecate prompts |
| owner | Full workspace control including ownership transfer |
Enterprise permission levels also map to view, edit, publish, and export for fine-grained checks.

