Roles and access

Access in edisyl has two layers. An organization role decides what someone can do across your edisyl install. A pack role decides what they can do on one pack. Someone can be a Contributor on one pack and a Viewer on another.

Organization roles

Everyone in your organization holds one of three roles.

	Admin	Operator	Consumer
Ask, from the web app, the CLI or an AI tool over MCP, and open shared links	Yes	Yes	Yes
Read packs visible to the whole organization	Yes	Yes	Yes
Use the full web app	Yes	Yes	Connect instructions only
Teach, task and steer packs	Every pack, restricted ones included	By pack role	No
Create packs, connections, queries, agents and skills	Yes	Yes	No
See the member list and organization usage	Yes	Yes	No
Grant access to a pack	Yes	Only as that pack’s Admin	No
Edit the organization, read the audit log, manage members, roles and invites, AI providers and sign-in settings	Yes	No	No
Use the admin API on your deployment	Yes	No	No

Consumers can only ask. Anything not explicitly open to a Consumer is closed to them. A Consumer holds at most Viewer on any pack, and changing someone to Consumer lowers all of their pack roles to Viewer.

Pack roles

Each pack has its own members, and each member holds one role on it.

Pack role	What it adds
Viewer	Ask the pack
Contributor	Everything a Viewer can do, plus teach, task and steer the pack
Admin	Everything a Contributor can do, plus manage the pack’s members and settings

An organization Admin can teach, task and steer every pack without a pack role. An Operator needs Contributor or Admin on a pack to change it.

The role new people get

• Single sign-on and signup links add people as Consumers.
• Email invites add people as Operators, unless whoever sends the invite picks another role.
• Admins set at deploy time are fixed. They can’t be demoted from the app.

To let a Consumer build packs, an Admin changes their organization role to Operator, then a pack Admin gives them Contributor on the packs they work on.

See AI governed by you for how roles fit with what your organization controls.