---
title: "Workspaces Role-Based Access Control (WSRBAC)"
slug: "workspaces-role-based-access-control-wsrbac"
updated: 2025-12-16T19:31:42Z
published: 2025-12-16T19:31:42Z
canonical: "docs.unqork.io/workspaces-role-based-access-control-wsrbac"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unqork.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspaces Role-Based Access Control (WSRBAC)

UDesignerClassic Designer

**User Permissions**, also known as Workspaces RBAC (role-based access control), control Creator access to specific workspaces in your environment. Administrators assign Creators to a [workspace](/v1/docs/introduction-to-workspaces) and set their level of access for that workspace.

It’s important to note that, while WSRBAC (Workspace Role-Based Access Control) restricts what elements are available in the UI, it does not restrict how Creators can customize their application’s behavior or what the application has access to.

The benefits of User Permissions include:

- Preventing Creators from editing elements in other workspaces.
- Setting a user to manage a single workspace, so they can only reference or review specific configurations.
- Allowing a Service Administrator to view specific workspaces.
- Sharing only specific modules with other workspaces or the environment.

> To learn more about Workspace permissions and their roles, visit our [Creator Role Administration](/v1/docs/creator-role-administration) article.

## Accessing User Permissions

User Permissions are accessed from the environment's [Workspace](/v1/docs/introduction-to-workspaces) page.

To access the Workspace Roles drawer:

1. From the workspace page, click the (**ellipsis**) button.
2. Click **U****ser Permissions**. The User Permissions drawer displays

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/permissionsButton_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)

## Assigning User Permissions

You assign a user to a role at the same time as assigning them to a workspace. It's important to note that administrators have access to all Workspaces actions, so you cannot assign them a role.

To assign a user to a workspace and permission from the **User Permissions** drawer:

1. From the **Select User(s)** drop-down, enter or select the name of a user. Repeat this step for each additional user.
2. (Optional) To send an email to recently assigned users, set **Notify Users by Email** to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D) (**checked**).
3. Underneath the **Select User(s)** drop-down, in the Select drop-down, enter or select a role to assign to the user(s).

> [!NOTE]
> All users selected in the first step are assigned this role.

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/assignNewUsers_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)
4. Click Add. The new users display in the **Users** list.
5. Click **Close**.

After adding a user, their email and permission level displays in the **Users** table. If the **Notify Users by Email** setting is checked, the user also receives an email notification when they're added or removed from a workspace.

## Changing a User's Workspace Role

Users with **Can Manage** permissions can change the permissions of other users, or remove them from the workspace.

> To discover what each workspace permission type allows a user to do, view our [Creator Role Administration](/v1/docs/creator-role-administration#Workspac) article.

To change a user's workspace permission from the **User Permissions**drawer:

1. Navigate to the **Users** table.
2. In the Permission column, select a permission level from the drop-down. Options include **Can View**, **Can Edit**, **Can Manage**, **No Access** and **Remove**.

> [!NOTE]
> Creators assigned to the **Administrator** environment role can only be assigned the Can Manage permission.

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/changePermissions_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)
3. Click **Close**.

## Removing a User From a Workspace

To change a user's workspace permission from the **User Permissions** drawer:

1. Navigate to the **Users** table.
2. In the Permission column, from the drop-down, enter or select `Remove`. The user is removed from the workspace immediately.

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/removePermission_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)
3. Click **Close**.

Workspaces RBAC (role-based access control), also known as User Permissions, is the best way to securely ensure users only have access to specific workspaces in your environment. Administrators do this by assigning users to a [workspace](/v1/docs/introduction-to-workspaces) and setting their level of access for that workspace.

It’s important to note that, while WSRBAC (Workspace Role-Based Access Control) restricts what elements are available in the UI, it does not restrict how Creators can customize their application’s behavior or what the application has access to.

> [!TIP]
> To learn more about modules and workflows in workspaces, visit our [Workspaces: Working with Module-Type Apps](/v1/docs/working-with-module-type-apps) and [Workspaces: Working with Workflow-Type Apps](/v1/docs/working-with-workflow-type-apps) articles.

> [!TIP]
> To learn more about sharing modules and Data Collections, view our [Workspaces Role-Based Access Control (WSRBAC) With Shared Elements](/Output/unqorkconsultant/HTML5_FlareWebHelp_Sidenav/Content/O-Security/O02-RBAC/O02002B-Workspaces_RBAC_Shared_Elements.htm) article.

The benefits of Workspaces RBAC include:

- Preventing Creators from editing elements in other workspaces.
- Setting a user to manage a single workspace, so they can only reference or review specific configurations.
- Allowing a Service Administrator to view specific workspaces.
- Sharing only specific modules with other workspaces or the environment.

> [!TIP]
> To learn more about Workspace permissions and their roles, visit our [Creator Role Administration](/v1/docs/creator-role-administration) article.

Learn about User Permissions by clicking on the tabs below:

## Accessing Workspace Roles

From a workspace tile, use one of the following options:

- Click the **Workspace Users** button.
- Click the `…` (**ellipsis**) button, then click **Workspace Users**.

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Workspaces_tile_access_thumb_0_0.png?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)

## Assigning Users to a Workspace and Role

You assign a user to a role at the same time as assigning them to a workspace. It's important to note that administrators have access to all Workspaces actions, so you cannot assign them a role.

To assign a user to a workspace and a role from the Workspace Users modal:

1. In the **Select User(s)** field, enter the user's name. Or, select a user from the drop-down.

> [!TIP]
> You can select multiple users in this step. They'll be assigned the same Workspaces role when added.
2. Next to the user name, select a Workspaces role from the drop-down. The default is **Can View**.

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Workspaces_RBAC_add_user_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)
3. Click **Add**.

Once added, the selected users, their email addresses, and their permission levels display in the table. Users also receive an email notification when they're added or removed from a workspace.

## Changing a User's Workspace Role

To change a user's workspace role from the Workspace Users modal:

In the **Permission** column of the table, select a permission level from the drop-down for a specific user. Your options are **Can View**, **Can Edit**, **Can Manage**, and **Remove**.

![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Workspaces_RBAC_change_role_thumb_0_0.png?sv=2026-02-06&spr=https&st=2026-11-06T15%3A33%3A43Z&se=2026-11-06T16%3A33%3A43Z&sr=c&sp=r&sig=v%2FpFEChOszBmEziwhsRGqAqEc5gjtw%2FaQUyC%2Fzthiy4%3D)

## Removing a User From a Workspace

To remove a user from a workspace using the Workspace Users modal:

In the **Permission** column, select **Remove** from the drop-down.

> [!NOTE]
> Users can remove themselves from a workspace role. In this case, they see **Leave** instead of **Remove** in the permissions column.

## Resources

- [Introduction to Role-Based Access Control (RBAC)](/v1/docs/introduction-to-express-role-based-access-control-rbac)
- [Introduction to Workspaces](/v1/docs/introduction-to-workspaces)
- [Workspaces Role-Based Access Control (WSRBAC) with Shared Elements](/v1/docs/workspaces-role-based-access-control-wsrbac-with-shared-elements)
- [Workspaces: Environment Level](https://docs.unqork.io/Content/A00-Unqork_Platform/A00102-Workspaces_Env_Level.htm)
- [Creator Role Administration](/v1/docs/creator-role-administration)

RBAC (Role-Based Access Control) is a method to control system access for authorized users. The role in RBAC refers to the levels of access employees have to a network.

Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform.

WSRBAC (Workspaces Role-Based Access Control) is a method to control user access to a workspace. Users must be assigned to a workspace using WSRBAC before they can view or edit applications and modules inside the space.

The UI (user interface) is a device's end-user interaction and communication point. It can include display screens, keyboards, and mouse. It is also how a user interacts with your application.

Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform.

A UI (User Interface) Drawer is a layout panel that slides out from the side of the screen to display content. In UDesigner, components display their configuration panels in a drawer.

A modal is a window that appears on top of the content you are currently viewing.