> For the complete documentation index, see [llms.txt](https://docs.datasuite.vn/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.datasuite.vn/english/sharing-and-access-management/permission/centralized-role-management.md). # Centralized Role Management The **FPT Data Suite** system adopts the **RBAC** (Role-Based Access Control) model with clearly defined roles at two levels: **Organization** and **Workspace**. Each role corresponds to a specific set of permissions, helping to manage responsibilities and separate tasks across the system. #### **Organization-Level Roles** Roles at the **Organization level** govern high-level administrative access and system-wide management functions. * **Owner:** Full control over the Organization: * Add/remove users * Assign roles * Create/delete workspaces * Access all system resources and settings. * **Specialist** * Access advanced technical or analytical features. * Cannot manage organizational settings like the Owner. * **Restricted** * Minimal access at the Organization level. * Suitable for users limited to specific Workspaces without organizational visibility. **Organization-Level Role Permissions Table**\ *(*summarized for key modules: Organization, Members, Workspaces*)*

Organization Role	Module	List
Owner	Organization	N/A
Owner	Organization Member	All
Owner	Workspace	All
Specialist	Organization	N/A
Specialist	Organization Member	All
Specialist	Workspace	All
Restricted	Organization	N/A
Restricted	Organization Member
Restricted	Workspace	Only for assigned workspace

#### Workspace-Level Roles Workspace-level roles define access to **Datasets**, **Data Models**, **Reports**, and other components within each workspace. * **Manager -** Full workspace control: * Invite members * Assign roles * Edit and manage all resources * **Member:** * Create and edit Datasets, Data Models, Reports, Pipelines * Share Reports * Cannot configure workspace settings or assign roles * **Contributor -** Same as Member, but **cannot share Reports** * **Viewer -** Read-only access to all shared resources * **Restricted -** Limited to **only** resources shared directly with them **Workspace-Level Role Permissions Table**

Workspace Role	Module	Share	List
Manager	Dataset	N/A	All
Manager	Data model	N/A	All
Manager	Report		All
Manager	Workspace Member	N/A	All
Manager	User Role	N/A	All
Manager	User Group	N/A	All
Manager	MAdjust	N/A	All
Manager	ORG Chart	N/A	All
Manager	Inventory ORG Chart	N/A	All
Member	Dataset	N/A	All
Member	Data model	N/A	All
Member	Report		All
Member	Workspace Member	N/A
Member	User Role	N/A
Member	User Group	N/A
Member	MAdjust	N/A
Member	ORG Chart	N/A
Member	Inventory ORG Chart	N/A
Contributor	Dataset	N/A	All
Contributor	Data model	N/A	All
Contributor	Report		All
Contributor	Workspace Member	N/A
Contributor	User Role	N/A
Contributor	User Group	N/A
Contributor	MAdjust	N/A
Contributor	ORG Chart	N/A
Contributor	Inventory ORG Chart	N/A
Viewer	Dataset	N/A	All
Viewer	Data model	N/A	All
Viewer	Report		All
Viewer	Workspace Member	N/A
Viewer	User Role	N/A
Viewer	User Group	N/A
Viewer	MAdjust	N/A
Viewer	ORG Chart	N/A
Viewer	Inventory ORG Chart	N/A
Restricted	Dataset	N/A
Restricted	Data model	N/A
Restricted	Report		According to the shared Report and according to the configuration in the User Group (if any)
Restricted	Workspace Member	N/A
Restricted	User Role	N/A
Restricted	User Group	N/A
Restricted	MAdjust	N/A
Restricted	ORG Chart	N/A
Restricted	Inventory ORG Chart	N/A

![(question)](https://wiki.fci.vn/s/e5i0tp/8401/1eaa024f06dac58f149033b1fed7ed2ee21ec52c/_/images/icons/emoticons/help_16.svg) Depends on the Report Role assigned to each Report #### Add User to Organization {% stepper %} {% step %} Log in to FPT Data Suite, select the active Organization {% endstep %} {% step %} Navigate to **Manage Organization > Members**, click **Add Members** {% endstep %} {% step %} Enter the user's email, assign a Role, and click **Save**

{% endstep %} {% endstepper %} #### Add User to Workspace {% stepper %} {% step %} Log in to FPT Data Suite, select the active Organization {% endstep %} {% step %} Navigate to **Manage Organization > Workspace**, click the **Add Member** icon in the desired workspace

{% endstep %} {% step %} Search for the user, assign a Role, and click **Invite**

{% endstep %} {% endstepper %} #### Update Workspace Role {% stepper %} {% step %} Log in to FPT Data Suite, select the active Organization {% endstep %} {% step %} Navigate to **Manage Organization > Workspace**, click the **Add Member** icon {% endstep %} {% step %} Use the dropdown next to each user to update their Role or remove them from the workspace

{% endstep %} {% endstepper %}