Search our knowledgebase

Cynoia team

Roles and permission

Roles define what each team member can see and do inside a workspace, projects, and apps.

Roles define what each team member can see and do inside a workspace, projects, and apps.

Written by : Cynoia team

Last Updated on 27 January 2026

Roles & Access

In Cynoia, roles define what each team member can see and do inside a workspace, projects, and apps.

Roles help teams collaborate securely while keeping the right level of control.

Available Roles

Cynoia provides several default roles. Each role comes with predefined permissions.

Note: Moderators have full access to everything.

Moderator

Moderators have full control over the workspace and all its features.

They can:

  • Manage workspace settings

  • Invite and remove members

  • Assign and change roles

  • Create, edit, and delete projects

  • Manage tasks, automations, budgets, and settings

  • Access all apps (Projects, Chat, Notes, Calendar, etc.)

This role is ideal for:

  • Workspace owners

  • Team leads

  • Administrators

Editor

Editors can actively work on projects and collaborate with the team, but cannot manage workspace-level settings.

Editors can:

  • Create and manage projects

  • Create, edit, and delete tasks

  • Update task status, priority, labels, points, and dates

  • Comment on tasks and collaborate with the team

  • Use views like Kanban, List, Calendar, Gantt, and Sprint

  • Create chat rooms and participate in discussions

  • Create and manage notes and folders

Editors cannot:

  • Manage workspace roles or permissions

  • Delete the workspace

  • Manage subscriptions

Viewer

Viewers have limited access, mainly focused on visibility and basic interaction.

Viewers can:

  • View projects and tasks

  • Update tasks assigned to them

  • Comment on tasks they are involved in

  • Browse chat channels and read messages

  • View notes they have access to

Viewers cannot:

  • Create tasks (unless explicitly allowed)

  • Manage members or settings

  • Access restricted content

This role is ideal for:

  • Stakeholders

  • Clients

  • Limited access collaborators

How Permissions Work

Cynoia uses a smart permission system:

  • Roles define default access

  • Project or content-level permissions can add restrictions

  • Private content requires explicit access

  • The most permissive rule applies when multiple permissions exist

This ensures flexibility without sacrificing control.

Changing Roles

Workspace Moderators can:

  • Change a member’s role at any time

  • Remove members from the workspace

  • Assign access based on responsibility

Changes take effect immediately.

Creating Custom roles

In addition to default roles, Cynoia allows Workspace Owners and Moderators to create custom roles with tailored permissions.

This gives teams full flexibility to control access across different apps.

Who Can Create Custom Roles?

Only the following roles can create and manage custom roles:

  • Workspace Owner

  • Moderator

What Are Custom Roles?

Custom roles let you define exactly what a member can do, app by app.

Instead of using a single predefined role, you can:

  • Create a new role

  • Choose permissions per app

Assign that role to specific members


Role Comparison Table

This table shows what each default role can do by default across Cynoia apps.

Role

Organization

Projects

Chat

Call Rooms

Notes

Automation

Owner

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Moderator

Editor

Viewer

Editor

Editor

Editor

Editor

Editor

Viewer

Viewer

Viewer

Viewer

Viewer

Viewer

Viewer

💡 Owners and Moderators can also create custom roles with tailored permissions.

Global vs Resource-Level Permissions

Cynoia uses two layers of permissions to give teams maximum flexibility.

Global Role (Default Access)

Your global role applies when:

  • You join public projects

  • You join public chat rooms

  • You access public note collections

  • You enter shared resources without a direct invitation

In these cases, you automatically inherit your global role permissions.

Example:

  • If your global role is Editor, you can edit content in public projects you join.

  • If your global role is Viewer, you’ll have read-only access.

Resource-Level Permissions (Overrides)

When a project, channel, or note is created, its creator or a moderator can:

  • Invite you directly

  • Assign you a specific role for that resource

This role overrides your global role for that specific resource only.

Example:

  • You can be a global Moderator

  • But be assigned as a Viewer on a specific project or chat

  • Or an Editor on one project and Viewer on another

This ensures precise access control without changing your overall role.

Why This Matters

This system allows teams to:

  • Limit access to sensitive projects

  • Give temporary or partial permissions

  • Avoid over-permissioning users

Choosing the Right Role

Not sure which role to assign? Here’s a simple guide.

🟣 Owner

Best for:

  • Company founders

  • Workspace administrators

Use when someone needs:

  • Full control over the workspace

  • Billing, roles, and organization settings

⚠️ Very limited to only 1 user ( you can transfer ownership )

🔵 Moderator

Best for:

  • Team leads

  • Product managers

  • Admin-level collaborators

Use when someone needs:

  • Full access to apps

  • Ability to manage content and settings

  • Control over roles and permissions

🟢 Editor

Best for:

  • Core team members

  • Contributors

  • Designers, developers, writers

Use when someone needs:

  • Create and edit content

  • Work inside projects, chat, notes, and calls

  • No access to user management or organization settings

⚪ Viewer

Best for:

  • Clients

  • Stakeholders

  • Read-only users

Use when someone needs:

  • View access only

  • No ability to modify content

🧩 Custom Roles

Best for:

  • External collaborators

  • QA teams

  • Support agents

  • Special use cases

Use custom roles when:

  • Default roles are too broad

  • You need different permissions per app

  • You want tighter access control


What’s Next?

Now that you understand roles and permissions, you’re ready to start understanding your workspace.

👉 Next: Understanding Your Workspace