Access Control

Roles and Permissions

Team roles and what each role can do on a dataset.

Every dataset has a team of members. Each member is assigned one of four roles that controls what they can do.

Roles

RoleDescription
ownerFull control. Can publish, delete, manage members, and perform all edits. Assigned to the user who created the dataset.
adminCan manage team members, edit all metadata, upload files, and initiate publishing. Cannot delete the dataset.
editorCan edit metadata and upload files. Cannot manage members or publish.
viewerRead-only access. Can view all dataset content but cannot make changes.

Managing Team Members

Dataset owners and admins can manage the team from the Permissions tab at /app/datasets/[datasetId]/permissions.

Inviting a Member

  1. Go to the Permissions tab.
  2. Enter the email address of the person you want to invite.
  3. Select a role.
  4. Send the invitation.

The invited user receives an email with a link to accept. If they do not have an account, they will need to register first.

Changing a Role

From the Permissions tab, find the member and select a new role from the dropdown. Changes take effect immediately.

Removing a Member

From the Permissions tab, remove a member using the remove action next to their name. The dataset owner cannot be removed without first transferring ownership.

Platform-level Access

Access to the Envision Portal platform itself is invite-only in production. New users must receive a platform invitation before they can register. Platform invitations are separate from dataset-level invitations.

Copyright © 2026