Project roles and permissions

This page summarizes what each project role can do within a single project. Use it to understand what actions each role can perform.

Roles are created per project using these templates:

Project.Owner
Project.Admin
Project.Contributor
Project.Reader

Notes

Permissions are applied within each project independently.
◐ “Own items only” means the action is allowed for content you created.

Role vs. permission matrix

Legend: ✅ allowed · ❌ not allowed · ◐ allowed for own items only

Permission	Owner	Administrator	Contributor	Reader
Projects Read	✅	✅	✅	✅
Projects Update	✅	✅	❌	❌
Projects Delete	✅	❌	❌	❌
Datasets Read	✅	✅	✅	❌
Datasets Create	✅	✅	✅	❌
Datasets Update	✅	✅	◐	❌
Datasets Delete	✅	✅	◐	❌
Files Read	✅	✅	✅	✅
Files Create	✅	✅	✅	❌
Files Update	✅	✅	✅	❌
Files Delete	✅	✅	◐	❌
Query Sessions Read	✅	✅	✅	❌
Events Read	✅	✅	❌	❌
Jobs Read	✅	✅	❌	❌
Query Sessions Create	✅	✅	✅	❌
Query Sessions Update	✅	✅	◐	❌
Query Sessions Delete	✅	✅	◐	❌
Query Sessions Execute	✅	✅	◐	❌
Chat Sessions Read	✅	✅	✅	❌
Chat Sessions Create	✅	✅	✅	❌
Chat Sessions Update	✅	✅	◐	❌
Chat Sessions Delete	✅	✅	◐	❌

How role permissions apply

Your role within a project determines what you can do in that project.
Some actions (marked ◐) apply only to items you created.

Add users to a project

To give someone access to a project:

Open the project and go to Settings → Access & Permissions.
Use the members list to add a user by User ID.
Choose a role (Owner, Admin, Contributor, or Reader).
Save. The user will now have access according to the role.

Assign the lowest role that enables the work needed. Use Contributor for most collaborators; Reader for view-only access.

Remove users from a project

To remove someone from a project:

Open the project and go to Settings → Access & Permissions.
In the members list, find the user by name or User ID.
Click on Remove button.
Confirm the removal.

Change a user’s role

To change a member’s role in a project:

Open the project and go to Settings → Access & Permissions.
In the members list, find the user by name or User ID.
Click on Edit button
Update their role (for example, switch from Reader to Contributor).
Save your changes.

Self-modification rules

Users can modify their own project roles under certain conditions to prevent orphaned projects (projects with no administrators):

Scenario	Allowed?	Notes
System administrator modifying own role	✅	Platform admins can always manage their own project roles
User demoting self when other Owner/Admin exists	✅	Safe because another administrator can manage the project
User changing own role but keeping Owner/Admin	✅	User remains an administrator
Sole Owner/Admin demoting self	❌	Would orphan the project; add another admin first
User removing self from project	❌	Users cannot remove themselves from a project

Tip: If you’re the only Owner or Administrator in a project and need to leave or change your role, first assign another trusted user as Owner or Administrator.