Skip to main content

Overview

Strada uses Role-Based Access Control (RBAC) to manage what your team members can see and do. Each member gets a role that controls their permissions across the platform. Higher-level roles have more access, lower-level roles are more restricted. You can assign roles when inviting members or change them later from the Members page.

Roles

Strada has 8 assignable roles, from most to least privileged:
RoleDescription
AdminFull access to all organization settings, members, and resources
IT AdminManages integrations, secrets, API keys, phone numbers, and widgets
ExecutiveCan create and manage analytics dashboards and reports
Agent ManagerCan create and edit agents, manage campaigns, and control which agents other members can edit
Agent DeveloperCan create and edit agents, campaigns, knowledge bases, and related configurations
SupportCan review conversations and claims, and manage QA, gaps, and knowledge bases
TesterCan manage test numbers, run campaigns, and review conversations
ViewerRead-only access, can submit conversation feedback
Only Admin users can invite members, remove members, change roles, and delete agents.

Permission Details

Here’s what each permission lets you do, grouped by area. The matrix below each section shows which roles have the permission.

Agents

  • View Agents: See agents and their configurations, prompt settings, actions, workflows, deployed versions, evaluations, and test cases.
  • Create Agents: Create new agents or clone existing ones.
  • Edit Agents: Change an agent’s prompt, conversation flow, actions, analysis settings, post-call workflows, and widget config. Connect/disconnect integration tools, publish versions, revert to previous versions, and manage evaluations and test cases. Agent Managers and Developers also need per-agent access.
  • Delete Agents: Permanently delete agents.
  • Manage Agent Access: Choose which Agent Managers and Developers can edit specific agents, and see which agents a member has access to. See Agent-Level Access Control.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Agentsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Create Agentsβœ…βœ…βœ…
Edit Agentsβœ…βœ…βœ…
Delete Agentsβœ…
Manage Agent Accessβœ…βœ…

Members

  • View Members: See the member list with names, emails, roles, and join dates.
  • Invite Members: Add new members by email and set their role.
  • Remove Members: Remove a member from the organization.
  • Change Roles: Change a member’s role. Their sessions get revoked so they log in again with updated permissions.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Membersβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Invite Membersβœ…
Remove Membersβœ…
Change Rolesβœ…

Campaigns

  • View Campaigns: See campaigns, their status and stats, call lists with transcripts and analysis, and campaign config.
  • Manage Campaigns: Create outbound campaigns with call lists, scheduling, and retry config. Archive/unarchive campaigns and remove call entries.
  • Run Campaigns: Start, pause, and resume live outbound campaigns.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Campaignsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Campaignsβœ…βœ…βœ…
Run Campaignsβœ…βœ…βœ…βœ…

Connections & Integrations

  • View Connections: See which integrations (HubSpot, Salesforce, Slack, etc.) are set up and their status.
  • Manage Connections: Add new integrations, delete existing ones, and test connections.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Connectionsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Connectionsβœ…βœ…

Secrets & API Keys

  • View Secrets: See stored secrets (values are masked) and their descriptions. These are credentials that agents use during actions.
  • Manage Secrets: Create, edit, and delete secrets for things like API keys, passwords, and external service credentials.
  • View API Keys: See Strada API key names and creation dates.
  • Manage API Keys: Create and delete Strada API keys.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Secretsβœ…βœ…βœ…βœ…βœ…βœ…
Manage Secretsβœ…βœ…
View API Keysβœ…βœ…βœ…βœ…βœ…βœ…
Manage API Keysβœ…βœ…
Viewer and Tester roles can’t see secrets or API keys.

Phone Numbers

  • View Phone Numbers: See phone numbers, phone number groups, and coverage details.
  • Manage Phone Numbers: Import phone numbers, change their settings and agent assignments, release numbers, and manage phone number groups.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Phone Numbersβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Phone Numbersβœ…βœ…

Knowledge Bases

  • View Knowledge Bases: See knowledge bases, uploaded files, download files, check sync status, and view version history.
  • Manage Knowledge Bases: Create and delete knowledge bases, upload and remove files, trigger and review file syncs, scrape/crawl websites for content, and manage ingestion.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Knowledge Basesβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Knowledge Basesβœ…βœ…βœ…βœ…

Quality Assurance

  • View QA: See QA rubrics and sentiment labels, view scoring results on individual calls and chats, and check backfill status.
  • Manage QA: Create, edit, delete, and restore rubrics and sentiment labels. Generate AI-suggested rubrics, and trigger or cancel backfill scoring on past conversations.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View QAβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage QAβœ…βœ…βœ…βœ…

Conversations

  • View Conversations: See call history, chat logs, and email threads. Listen to recordings, read transcripts, and submit feedback.
  • Manage Conversations: Create, edit, delete, and reorder saved conversation views with custom filters and column layouts.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Conversationsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Conversationsβœ…βœ…βœ…βœ…βœ…

Analytics & Reports

  • View Analytics: See analytics dashboards, charts, and usage stats.
  • Manage Analytics: Create, edit, and delete analytics views, charts, and filters. Use the AI analytics chat.
  • View Reports: See the list of configured reports.
  • Manage Reports: Create, edit, delete, and manually trigger reports.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Analyticsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Analyticsβœ…βœ…
View Reportsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Reportsβœ…βœ…

Call Settings

  • View Schedules: See business hour schedules that control when agents can make or receive calls.
  • Manage Schedules: Create, edit, delete, and restore business hour schedules.
  • View Ended Reasons: See call ended reasons used to categorize why calls ended.
  • Manage Ended Reasons: Create, edit, and delete custom ended reasons for inbound and outbound calls. Rename built-in ended reasons.
  • View Call Retry Configs: See retry configurations that control automatic retry behavior for failed calls.
  • Manage Call Retry Configs: Create and edit retry rules, including intervals and max attempts.
  • View Test Numbers: See phone numbers marked as test numbers.
  • Manage Test Numbers: Add and remove test numbers. Calls to/from these numbers show up as β€œTest” in call history.
  • View Pronunciations: See pronunciation dictionaries that control how the AI says specific words.
  • Manage Pronunciations: Create, edit, and delete pronunciation entries.
  • View Do Not Call List: See the do-not-call list and whether tracking is on.
  • Manage Do Not Call List: Import and remove entries, and turn tracking on or off.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Schedulesβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Schedulesβœ…βœ…βœ…
View Ended Reasonsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Ended Reasonsβœ…βœ…βœ…
View Call Retry Configsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Call Retry Configsβœ…βœ…βœ…βœ…
View Test Numbersβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Test Numbersβœ…βœ…
View Pronunciationsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Pronunciationsβœ…βœ…βœ…
View Do Not Call Listβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Do Not Call Listβœ…βœ…βœ…

Widgets

  • View Widgets: See widget configurations, themes, and allowed origins.
  • Manage Widgets: Create, edit, delete, and set a default widget config. Manage allowed origins that control where widgets can be embedded.
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Widgetsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Widgetsβœ…βœ…

Claims & Gaps

  • View Claims: See claims data linked to conversations.
  • View Gaps: See gap clusters that show where agents are struggling or missing knowledge.
  • Manage Gaps: Update gap cluster status (e.g. mark as resolved or in progress).
PermissionAdminIT AdminExecutiveAgent ManagerAgent DeveloperSupportTesterViewer
View Claimsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
View Gapsβœ…βœ…βœ…βœ…βœ…βœ…βœ…βœ…
Manage Gapsβœ…βœ…

Agent-Level Access Control

On top of role-based permissions, Strada has per-agent access control so you can manage exactly who can edit which agents. This is useful when multiple teams work on different agents.

How It Works

  • Admins can edit all agents, no restrictions.
  • Agent Managers and Agent Developers need explicit edit access for each agent they want to modify.
  • New Agent Managers and Developers start with no agent access. It has to be granted.

Agent Manager vs Agent Developer

These two roles are mostly identical. The only difference is that Agent Managers can control agent access for other members:
CapabilityAgent ManagerAgent Developer
Create new agentsβœ…βœ…
Edit agents (with per-agent access)βœ…βœ…
Manage campaignsβœ…βœ…
Run campaignsβœ…βœ…
Manage knowledge basesβœ…βœ…
Manage QAβœ…βœ…
Manage schedules, pronunciations, ended reasonsβœ…βœ…
Control which agents other members can editβœ…
Agent Managers are like team leads. They can do everything Agent Developers can, plus grant or revoke agent edit access for other members.

Granting Agent Access

You can manage per-agent access in two places:
1

From the Agent

Go to an agent’s settings and open the Access tab to see who can edit it and add or remove members.
2

From the Member

Go to a member’s profile on the Members page and open the Agent Access tab to see which agents they can edit, and grant or revoke access.
Removing agent access only blocks editing, not viewing. All roles can still see all agents.

Role Summaries

Quick overview of what each role is for:
Full access to everything. Can manage members, assign roles, delete agents, and configure all organization settings.Good for: Org owners and senior managers who need full control.
Focused on infrastructure. Can manage integrations, secrets, API keys, phone numbers, and widgets. Has read access to everything else but can’t modify agents, campaigns, or member roles.Good for: IT staff managing integrations and infrastructure.
Analytics and reporting access. Can create and manage dashboards and reports but can’t modify agents or org settings.Good for: Leadership and stakeholders who need data visibility.
Full agent-building permissions plus access management. Can create and edit agents, manage campaigns, and control which agents other Agent Managers and Developers can edit. Needs per-agent access to edit agents.Good for: Team leads overseeing a group of agent developers.
Everything needed to build agents. Can create agents, manage campaigns, update knowledge bases, and configure call settings. Needs per-agent access to edit agents.Good for: People actively building and maintaining agents.
Conversation review and quality management. Can manage QA rubrics, knowledge bases, gaps, and conversations. Can’t create or edit agents.Good for: Support teams and QA analysts.
Can run campaigns, manage test numbers, and review conversations. Limited to testing-related actions.Good for: QA testers validating agent behavior.
Read-only across the platform. Can browse agents, campaigns, conversations, analytics, etc. and submit conversation feedback. Can’t see secrets or API keys.Good for: Stakeholders who need visibility without edit access.