Roles & permissions overview

June 2, 2025 - tavolo
Roles & permissions overview

Roles & permissions overview

Learn about roles and permissions in Tavolo.

In Tavolo, we have roles that determine what people can do in a Workspace or Base.

You can give a member one of these roles:

  • Owner
  • Creator
  • Editor
  • Commenter
  • Viewer
  • No Access

If a role is assigned to a member at the base level, it takes precedence over a role assigned at the workspace level.

When inviting a user, their role designation is initially assigned but can be modified later. Our role system operates incrementally, with higher-level roles encompassing all privileges of lower-level roles. This hierarchy offers flexibility in permissions and fosters a transparent organizational structure in workspace or base management.

Roles

Roles serve as the basis for user privileges in Tavolo. They are associated with members at two levels: Workspace and Base. When a member is invited to a Workspace with a specific role, like an "Editor," they automatically have that role in all Bases within that Workspace. However, base owners or creators can customize permissions at the base level to align with specific needs. This dual-level role assignment system ensures adaptable user permissions and access management in Tavolo.

Owner: When a member creates a new Workspace or Base, they automatically become the Workspace or Base "Owner." This role grants exclusive privileges, including the authority to delete the Workspace or Base.

Creator: The "Creator" role shares all privileges with an "Owner," except for deleting the workspace or base. "Creators" have full administrative rights, except for deletion authority, which remains exclusive to the "Owner." This ensures balanced workspace or base management.

Editor: An "Editor" can create and edit records but cannot modify the base schema, like adding tables or fields. They strike a balance between data input and schema management.

Commenter: The "Commenter" role cannot add or edit records but can provide comments on existing records , facilitating communication and feedback.

Viewer: "Viewers" can only access records and associated comments, without the ability to contribute or make changes, ensuring controlled access for informational purposes.

No Access: This role, applied at the base level, revokes base access for the designated user. When applied at the workspace level, it gives the user no default access to any base within the workspace.

Workspace level permissions

The individual who creates the workspace is automatically designated as a Workspace owner. A workspace can have only one Owner. Access to bases within that workspace is granted to members based on their roles within the parent workspace. When a member becomes part of a workspace, the role at the workspace level is automatically applied to them for all bases in that workspace, unless a specific exception is configured to override at base level.

TaskOwnerCreatorEditorCommenterViewer
Invite member to workspace✔️✔️   
Manage member access to workspace✔️✔️   
Remove member access from workspace✔️✔️   
View members in workspace✔️✔️   
Delete Workspace✔️   
Billing & upgrade options✔️   
Create a new base✔️✔️✔️✔️✔️
Access existing bases at assigned roles✔️✔️✔️✔️✔️

Base level permissions

Collaboration

TaskOwnerCreatorEditorCommenterViewer
Invite members to base at or below your role✔️✔️   
Manage members access to base✔️✔️   
Remove member access from a base✔️✔️   
View members in a base✔️✔️   
Share base✔️✔️   
Share view✔️✔️   

Table & view operations

TaskOwnerCreatorEditorCommenterViewer
Add / modify / delete table✔️✔️   
Add / modify / delete fields✔️✔️   
Add / modify / delete views✔️✔️   
Hide / un-hide / reorder fields✔️✔️✔️✔️✔️
Add / modify / delete sort✔️✔️✔️✔️✔️
Add / modify / delete filters✔️✔️✔️✔️✔️
Add / modify / delete group-by✔️✔️✔️✔️✔️

Record operations

TaskOwnerCreatorEditorCommenterViewer
Add / modify / delete record✔️✔️✔️  
View & add comment on a record✔️✔️✔️✔️ 
View record✔️✔️✔️✔️✔️

Automations & advanced

TaskOwnerCreatorEditorCommenterViewer
Add / modify / delete Webhook✔️✔️   
ERD (Project & Table relations)✔️✔️✔️✔️✔️
API Snippet✔️✔️✔️✔️✔️
API Token✔️✔️✔️✔️✔️
 

 

Cookie Settings
This website uses cookies

Cookie Settings

We use cookies to improve user experience. Choose what cookie categories you allow us to use. You can read more about our Cookie Policy by clicking on Cookie Policy below.

These cookies enable strictly necessary cookies for security, language support and verification of identity. These cookies can’t be disabled.

These cookies collect data to remember choices users make to improve and give a better user experience. Disabling can cause some parts of the site to not work properly.

These cookies help us to understand how visitors interact with our website, help us measure and analyze traffic to improve our service.

These cookies help us to better deliver marketing content and customized ads.