Introduction

In Tracim, you have 2 system of "roles".

One is global to whole tracim instance and is called "global profile" (Groups). The other is workspace related and is called "workspace role".

Global profile

	Normal User	Managers	Admin
participate to workspaces	yes	yes	yes
access to tracim apps	yes	yes	yes
-------------------------------	-------------	-------------	---------
create workspace	no	yes	yes
invite user to tracim	no	yes, if manager of a given workspace	yes
-------------------------------	-------------	-------------	---------
set user global profile rights	no	no	yes
deactivate user	no	no	yes
-------------------------------	-------------	-------------	---------
access to all user data (/users/{user_id} endpoints)	personal-only	personal-only	yes

Workspace Roles

	Reader	Contributor	Content Manager	Workspace Manager
read content	yes	yes	yes	yes
------------------------------	--------	-------------	-----------------	-------------------
create content	no	yes	yes	yes
edit content	no	yes	yes	yes
copy content	no	yes	yes	yes
comments content	no	yes	yes	yes
update content status	no	yes	yes	yes
-------------------------------	--------	-------------	-----------------	-------------------
move content	no	no	yes	yes
archive content	no	no	yes	yes
delete content	no	no	yes	yes
------------------------------	--------	-------------	-----------------	-------------------
edit workspace	no	no	no	yes
invite users (to workspace)	no	no	no	yes
set user workspace role	no	no	no	yes
revoke users (from workspace)	no	no	no	yes
------------------------------	--------	-------------	-----------------	-------------------
modify comments	no	owner	owner	yes
delete comments	no	owner	owner	yes