User Roles in Cascade

In Cascade, we've enabled four different types of roles. This'll define the groupings of permissions that can be granted to a user.

"Viewer" roles are available only in "Essentials and Enterprise+" tiers.

By definition,

Admin: A role that defines this user has access to all organization settings.
Manager: A role that can be assigned to a user that gives fairly broad access to the organization.
Contributor: A role that can contribute to things that they're given access to, in the organization.
Viewer: (Only in Essentials and Enterprise+ tiers) A role that has been granted access to view and comment on specific things in the organization.

Depending on the Role that your inviter had assigned you, your access changes, and the pages that are displayed varies. If you are,

Admin, you'll have every access.
Manager, you'll not have access to Billing, Strategy Model and Custom Field pages, except that, you got everything.
- What this means is that, you'll not see Billing, Strategy Model, and Custom Field tabs in the Administration page. You can navigate to Administration page from the Admin > Settings under your profile picture/initials.
- You'll have access to Admin > Users since you can do user management - invite new users, edit user details like job title, name, role, do bulk user operations like bulk disable, bulk enable, export users details to CSV and delete users from workspace.
- You can also create teams and add members outside of a workspace to a team by inviting them into the workspace.
- You can edit the team details, remove team members or delete a team only if you're the owner of that team.
- Based on the permissions that you're assigned, you'll have view or edit access to the plans, reports and dashboards.
- By default, if you create a report or a dashboard, you'll be its owner thereby having all edit permissions on it.
Contributor, you'll not have access to any administrator activities. You can create or edit plans, track progress, and so on. You can add existing users, create/assign teams with existing users, but cannot add or invite new users.
- This means, you'll not see Admin tab itself from your profile picture/initials, nor the Invite Users on the left navigation pane. Your Home page will not show the Invite Team or Create Team area.
- If you're owner of a team, then from the Plans and Teams > All Teams page, you'll be able to edit the team details, remove team members or delete the team. You'll be able to add users who're already part of the workspace (invited or enabled) to the team.
- Based on the permissions that you're assigned, you'll have view or edit access to the plans, reports and dashboards.
- By default, if you create a report or a dashboard, you'll be its owner thereby having all edit permissions on it.
Viewer, you'll not have access to anything at all, except for just browsing and adding comments, wherever possible.

Viewers cannot add plans, goals, users, teams, reports, dashboards, nor can they make any progress updates or team updates. All they can do is just browse through and add comments, wherever the "option to comment" is available.

For your easy reference:

	Admin	Manager	Contributor	Viewer
Manage Billing or subscriptions	Yes	No	No	No
Rename components of strategy model	Yes	No	No	No
Create custom fields	Yes	No	No	No
Add or remove users to workspace	Yes	Yes	No	No
Create team	Yes	Yes	No	No
Add team members	Yes	Yes	Partial (However, they can add existing members within workspace.)	No
Remove team members	Yes	Yes, only if they're the team owner.	Yes, only if they're the team owner.	No
Delete team	Yes	Yes, only if they're the team owner.	Yes, only if they're the team owner.	No
Create plans	Yes	Yes	Yes	No
Edit plans	Yes	Yes, only if they've edit permissions on the plan.	Yes, only if they've edit permissions on the plan.	No
Add/manage plans, success criteria	Yes	Yes, only if they've edit permissions on the plan.	Yes, only if they've edit permissions on the plan.	No
Bulk Importer	Yes	Yes	No	No
Integrations	Yes	Yes	Yes	No
Create dashboards	Yes	Yes	Yes	No
Edit or delete dashboards	Yes	Yes, only if they've edit permissions on the dashboard.	Yes, only if they've edit permissions on the dashboard.	No
Generate reports	Yes	Yes	Yes	No
Edit or delete reports	Yes	Yes, only if they've edit permissions on the report.	Yes, only if they've edit permissions on the report.	No
Browse plans, add comments	Yes	Yes	Yes	Yes

If you're invited as a "Collaborator" on a plan, then you'll automatically be assigned a "Contributor" role. You can add existing members in the workspace to the plan or the team. You can create a team with existing members. However, you cannot add or invite new members i.e., members outside your workspace.

At any point of time, the Admin/Manager can change your role, and to see those changes, you need to logout and login back again.

Now that you have understood the layout and what is expected of each role, lets see how permissions provide more granularity to access control in Access and Permissions article.