# Roles and Permissions

## Tenant Workspace Roles (Owner, Admin, Member, Guest)

| Role | Who Assigns It |
| --- | --- |
| Owner | Auto-assigned on project creation, or via ownership transfer |
| Admin | Owner only can assign |
| Member | Owner or Admin can assign |
| Guest | Owner or Admin can assign |

**End-to-end journey (Owner, with role differences called out inline):**

1. **Register and onboard** — same for every role; whoever creates the tenant becomes its Owner.
2. **Create a project** (`/projects` → *Create Project*) — Owner and Admin can create projects; a Member or Guest can only be added to an existing one.
3. **Invite collaborators** —

   | Caller | Can invite as Admin? | Can invite as Member? | Can invite as Guest? |
   | --- | --- | --- | --- |
   | Owner | Yes | Yes | Yes |
   | Admin | No (an Admin cannot create another Admin) | Yes | Yes |
   | Member / Guest | No | No | No |

4. **Manage the research setup journey** (PICO, study design, conference) — *Edit* is available only to Owner/Admin; Members and Guests can *Review* but not *Edit*.
5. **Change project status, edit project details, or delete the project** — Owner/Admin only; for a Member or Guest, the *Edit Project* and *Delete Project* buttons render but are disabled with an explanatory tooltip.
6. **Remove a collaborator** —

   | Caller | Can remove Owner? | Can remove Admin? | Can remove Member? | Can remove Guest? |
   | --- | --- | --- | --- | --- |
   | Owner | No (protected) | Yes | Yes | Yes |
   | Admin | No | No | Yes | Yes |
   | Member / Guest | No | No | No | No |

7. **Manage tasks** via My Tasks (List, Board, Timeline, and Calendar views) — a Guest cannot create sections or tasks.
8. **View collaborators, activity, and the leaderboard** — available to all four roles.
9. **Availability** — any member can set their own weekly availability; it auto-syncs to the browser's current timezone by design.

**Owner's project view** (baseline for comparison)
![Project Overview, Owner](_images/fig-08-03-project-overview-owner.png)
*As Owner: "Delete Project" and "Edit Project" render as normal, enabled actions in the header.*

**Guest's project view**
![Project Overview, Guest](_images/fig-13-03-project-overview-guest.png)
*The same project as seen by a Guest: "Delete Project" / "Edit Project" are visibly muted — present but disabled, with a tooltip explaining the restriction on hover.*

**Admin's task view** and **Member's task view**

![Project, Admin role](_images/fig-13-01-project-tasks-admin.png)
![Project, Member role](_images/fig-13-02-project-tasks-member.png)

*Admin and Member see the same project surfaces as the Owner, minus the Owner-only protections noted above (an Admin additionally cannot remove the Owner or promote another member to Admin).*

## Institution Roles

Institution accounts use a parallel four-tier role set that maps directly onto the same tenant roles above — there is no separate institution permission engine:

| Institution Role | Maps to Tenant Role | Effective Permissions |
| --- | --- | --- |
| Owner | Owner | Full control, including billing and ownership transfer |
| Coordinator | Admin | Can manage projects and invite Members/Guests, cannot manage billing or Admin-level assignments |
| Mentor | Member | Standard contributor |
| Trainee | Guest | Read-mostly, per the Guest restrictions above |

An Institution account additionally completes **Institution Setup** (`/institution/setup`) before reaching its dashboard, and its Owner has access to Institution-specific settings (institution profile, institution plan/billing) layered on top of the same project/task experience documented in [Projects](projects).

**Institution Setup**
![Institution Setup](_images/fig-10-01-institution-setup.png)
*Institution accounts complete this step before reaching their dashboard.*