Workspace Access

Workspace access should match operational responsibility.

People who manage surfaces need different permissions than people who only review sessions or billing.

Suggested groups

• Admins manage workspace settings and billing.
• Surface owners edit routes, context, policy, and outcomes.
• Operators review sessions and handle handoffs.
• Viewers inspect activity without changing configuration.

Policy source

Do not rely on agent prompts to decide administrative access. Access should come from the workspace and role system.