> For the complete documentation index, see [llms.txt](https://docs.datasuite.vn/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.datasuite.vn/english/sharing-and-access-management/permission/centralized-role-management.md). # Centralized Role Management The **FPT Data Suite** system adopts the **RBAC** (Role-Based Access Control) model with clearly defined roles at two levels: **Organization** and **Workspace**. Each role corresponds to a specific set of permissions, helping to manage responsibilities and separate tasks across the system. #### **Organization-Level Roles** Roles at the **Organization level** govern high-level administrative access and system-wide management functions. * **Owner:** Full control over the Organization: * Add/remove users * Assign roles * Create/delete workspaces * Access all system resources and settings. * **Specialist** * Access advanced technical or analytical features. * Cannot manage organizational settings like the Owner. * **Restricted** * Minimal access at the Organization level. * Suitable for users limited to specific Workspaces without organizational visibility. **Organization-Level Role Permissions Table**\ \&#xNAN;*(*summarized for key modules: Organization, Members, Workspaces*)*

Organization Role	Module	List
Owner	Organization	N/A
Owner	Organization Member	All
Owner	Workspace	All
Specialist	Organization	N/A
Specialist	Organization Member	All
Specialist	Workspace	All
Restricted	Organization	N/A
Restricted	Organization Member
Restricted	Workspace	Only for assigned workspace

#### Workspace-Level Roles Workspace-level roles define access to **Datasets**, **Data Models**, **Reports**, and other components within each workspace. * **Manager -** Full workspace control: * Invite members * Assign roles * Edit and manage all resources * **Member:** * Create and edit Datasets, Data Models, Reports, Pipelines * Share Reports * Cannot configure workspace settings or assign roles * **Contributor -** Same as Member, but **cannot share Reports** * **Viewer -** Read-only access to all shared resources * **Restricted -** Limited to **only** resources shared directly with them **Workspace-Level Role Permissions Table**

Workspace Role	Module	Share	List
Manager	Dataset	N/A	All
Manager	Data model	N/A	All
Manager	Report		All
Manager	Workspace Member	N/A	All
Manager	User Role	N/A	All
Manager	User Group	N/A	All
Manager	MAdjust	N/A	All
Manager	ORG Chart	N/A	All
Manager	Inventory ORG Chart	N/A	All
Member	Dataset	N/A	All
Member	Data model	N/A	All
Member	Report		All
Member	Workspace Member	N/A
Member	User Role	N/A
Member	User Group	N/A
Member	MAdjust	N/A
Member	ORG Chart	N/A
Member	Inventory ORG Chart	N/A
Contributor	Dataset	N/A	All
Contributor	Data model	N/A	All
Contributor	Report		All
Contributor	Workspace Member	N/A
Contributor	User Role	N/A
Contributor	User Group	N/A
Contributor	MAdjust	N/A
Contributor	ORG Chart	N/A
Contributor	Inventory ORG Chart	N/A
Viewer	Dataset	N/A	All
Viewer	Data model	N/A	All
Viewer	Report		All
Viewer	Workspace Member	N/A
Viewer	User Role	N/A
Viewer	User Group	N/A
Viewer	MAdjust	N/A
Viewer	ORG Chart	N/A
Viewer	Inventory ORG Chart	N/A
Restricted	Dataset	N/A
Restricted	Data model	N/A
Restricted	Report		According to the shared Report and according to the configuration in the User Group (if any)
Restricted	Workspace Member	N/A
Restricted	User Role	N/A
Restricted	User Group	N/A
Restricted	MAdjust	N/A
Restricted	ORG Chart	N/A
Restricted	Inventory ORG Chart	N/A

![(question)](https://wiki.fci.vn/s/e5i0tp/8401/1eaa024f06dac58f149033b1fed7ed2ee21ec52c/_/images/icons/emoticons/help_16.svg) Depends on the Report Role assigned to each Report #### Add User to Organization {% stepper %} {% step %} Log in to FPT Data Suite, select the active Organization {% endstep %} {% step %} Navigate to **Manage Organization > Members**, click **Add Members** {% endstep %} {% step %} Enter the user's email, assign a Role, and click **Save**

{% endstep %} {% endstepper %} #### Add User to Workspace {% stepper %} {% step %} Log in to FPT Data Suite, select the active Organization {% endstep %} {% step %} Navigate to **Manage Organization > Workspace**, click the **Add Member** icon in the desired workspace

{% endstep %} {% step %} Search for the user, assign a Role, and click **Invite**

{% endstep %} {% endstepper %} #### Update Workspace Role {% stepper %} {% step %} Log in to FPT Data Suite, select the active Organization {% endstep %} {% step %} Navigate to **Manage Organization > Workspace**, click the **Add Member** icon {% endstep %} {% step %} Use the dropdown next to each user to update their Role or remove them from the workspace

{% endstep %} {% endstepper %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.datasuite.vn/english/sharing-and-access-management/permission/centralized-role-management.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.