Lightup uses roles to control what people can see and do. Every user has an app role, and a workspace role in each workspace they've joined, providing convenient, fine-grained permissions control across your Lightup instance.

App roles

Your app role dictates what you can do at the app level. The following App roles are available:

• ​App Admin grants the ability to invite users to Lightup, set their App roles, create workspaces, invite users to workspaces, and set their initial workspace role.
• ​App Editor grants the ability to create workspaces but not to invite new app users to Lightup or set their app roles.
• ​App Viewer grants the ability to be invited to join any workspace, but not to create workspaces.

Workspace roles

Every workspace user has one of four workspace roles: Admin, Editor, Viewer, or Observer.

• Admins can do everything associated with creating, editing, and operationalizing metrics and monitors, including manage datasources.
• Editors can do everything associated with creating, editing, and operationalizing metrics and monitors, except manage datasources.
• Viewers can see everything associated with metric and monitors, and can also make some system changes for the purpose of viewing and collaborating on data quality, but cannot create or change metrics or monitors. For example, the viewer can add columns to the Metric List, the Monitor List, and the Incident List.
• Observers can see data quality objects, but can't see anything that would reveal any data values.

Here are the permissions granted for each role (things that users with the role can do inside the relevant workspace):