Roles and Permissions
Lunaris uses workspace roles for shared content and administration. Private projects give selected workspace members a separate project role.
Workspace roles
| Capability | Owner | Editor | Viewer |
|---|---|---|---|
| Open workspace projects and content | Yes | Yes | Yes |
| Create and edit Shared-project content | Yes | Yes | No |
| Create and manage projects | Yes | Yes | No |
| View workspace members | Yes | Yes | Yes |
| Invite, remove, or change members | Yes | No | No |
| Manage workspace details | Yes | No | No |
| Manage extensions | Yes | No | No |
| Create and view backups | Yes | No | No |
| View Audit log | Yes | No | No |
| Manage billing | Yes | No | No |
| Delete workspace | Yes | No | No |
Owner
Owner is the administrative role. Owners control workspace access, extensions, backups, billing, and the Audit log in addition to normal project work. The workspace owner cannot be removed or changed to another role.
Editor
Editors can create, rename, update, and delete projects and content. They can see the member list but cannot invite people or manage workspace administration.
Viewer
Viewers can open Shared projects and content without changing them. A Private project can separately grant that member Editor or Viewer access.
Personal workspaces do not support additional members. In a shared workspace, an owner can invite new members as Editor or Viewer from Workspace Settings → Members.
Private-project roles
Private projects add a second access decision:
| Project access | What it allows |
|---|---|
| Project owner | Controls private access, can change visibility, and can transfer project ownership. |
| Editor | Can open and change that project’s content. |
| Viewer | Can open the project without changing it. |
| No project access | Cannot find or open the Private project. |
Private-project access can only be granted to existing workspace members. The project owner can change a member between Editor and Viewer, remove their access, or transfer project ownership to an eligible workspace member.
Shared projects do not use individual project roles. Every workspace member can open them, and their workspace role determines what they can do. Local projects have no roles because they never leave their browser profile.
See Invite People and Share Projects for the sharing workflow.