Creator Role Administration

To access Creator Role Administration, navigate to Administration > Creator Permissions > Creator Role Administration.

Creator roles are named permission sets that control what Creators can view, create, edit, and delete in the UnqorkAI platform. Creator Role Administration is organized into the following sections: Environment Roles for environment-level resource access, and Workspace Permissions for individual workspace access.

Managing Creator roles requires administrative permissions. Administrators needing access should contact their environment administrator.

[docs-mockup:DocsAdminListCanvas] Administration panel overview

Environment Roles

Environment roles are named permission sets assigned to Creator accounts. Each role defines which resource types a Creator can access and what actions they can perform on those resources.

Role List

The Environment Roles tab lists all Creator roles in the environment. Each row shows the role name and description.

Page Actions

Action	Description
Add Role	Opens a new page to create a new Creator role.

Role Actions

Click the actions menu on any row to access the available actions.

Action	Description
View	Opens a read-only view of the role's permission matrix. Available on all roles.
Edit	Opens the role form to update its name, description, or permissions. Not available on built-in roles. A Delete Role button is available on the edit page for non-built-in roles.

Default Roles

Every environment includes the following roles by default:

Role	Edit Action Available
Administrator	No
Contributor	Yes
Viewer	Yes
Environment:BASIC	No

Administrator and Environment:BASIC are built-in roles. They cannot be edited or deleted.

Role Capabilities

Each default role grants a different level of access to the UnqorkAI platform and its administrative features.

Administrator: Full access to all resource types across the environment, plus administrative capabilities not available to other roles. Administrators can manage Creator accounts and roles, configure environment settings, access services and certificates, and use the refer string API to generate authentication tokens. Assign this role only to Creators who need to manage the environment, not just build in it.

Contributor: Create, edit, and delete access to resources in the workspaces where they belong. Contributors cannot access administration pages or environment-level configuration. Contributor is the standard role for active Creators building applications.

Viewer: Read-only access to workspace resources. Viewers cannot create, edit, or delete anything. Use this role for Creators who need to review or reference work without making changes.

Environment:BASIC: A restricted role with no resource permissions. Creators with this role can log in to the UnqorkAI platform but cannot view, create, edit, or delete applications, modules, services, styles, or any other resource type. Use this role to give a Creator login access without granting them access to any environment content.

Permission Matrix

Each Creator role defines permissions across a set of resource types. Permissions are granted per action. Selecting a higher-privilege action automatically selects its prerequisites.

Permission Area	Description
Application	Access to applications and modules.
Managed Assets	Access to managed asset packages.
Document Templates	Access to PDF document templates.
Data Collections	Access to reference data collections.
Services	Access to configured services.
Style	Access to style sheets and CSS configurations.
Data Models	Access to data model definitions.

Each permission area supports the following actions:

Action	Prerequisites	Description
View	None	Read-only access to the resource.
Update	View	Ability to edit existing resources.
Create	View, Update	Ability to create new resources.
Delete	View, Update, Create	Ability to delete resources.
Promote	View	Ability to promote resources between environments. Not available for all resource types.

Promote is not available for Document Templates, Managed Assets, or Services.

Workspace Permissions

The Workspace Permissions tab is a reference for what each workspace permission level permits. Workspace permissions are additive to a Creator's environment role. Select any permission level to see a detailed breakdown of its capabilities.

Assigning a workspace permission level to a Creator is done in Creator (User) Administration.

Workspace Role	Description
Can Manage	Full access to all workspace content. Creators can view, create, edit, delete, and promote applications, workflows, modules, and data collections. They can also update workspace settings and manage services and data models.
Can Edit	Creators can view, create, edit, and delete workspace content but cannot promote it. They can manage data models and view library elements shared with the workspace.
Can View	Read-only access to workspace content. Creators cannot modify, promote, or delete anything in the workspace.
No Access	No access to workspace content. Use No Access to restrict a Creator whose environment role otherwise grants access to all workspaces.

Changelog

Date	Change
—	Initial publication.