> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getstrada.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles & Permissions

> Manage team access with role-based access control (RBAC)

## Overview

Strada uses Role-Based Access Control (RBAC) to manage what your team members can see and do. Each member gets a role that controls their permissions across the platform.

Higher-level roles have more access, lower-level roles are more restricted. You can assign roles when inviting members or change them later from the **Members** page.

***

## Roles

Strada has **8 assignable roles**, from most to least privileged:

| Role                | Description                                                                                   |
| ------------------- | --------------------------------------------------------------------------------------------- |
| **Admin**           | Full access to all organization settings, members, and resources                              |
| **IT Admin**        | Manages integrations, secrets, API keys, phone numbers, and widgets                           |
| **Executive**       | Can create and manage analytics dashboards and reports                                        |
| **Agent Manager**   | Can create and edit agents, manage campaigns, and control which agents other members can edit |
| **Agent Developer** | Can create and edit agents, campaigns, knowledge bases, and related configurations            |
| **Support**         | Can review conversations and claims, and manage QA, gaps, and knowledge bases                 |
| **Tester**          | Can manage test numbers, run campaigns, and review conversations                              |
| **Viewer**          | Read-only access, can submit conversation feedback                                            |

<Info>Only **Admin** users can invite members, remove members, change roles, and delete agents.</Info>

***

## Permission Details

Here's what each permission lets you do, grouped by area. The matrix below each section shows which roles have the permission.

### Agents

* **View Agents**: See agents and their configurations, prompt settings, actions, workflows, deployed versions, evaluations, and test cases.
* **Create Agents**: Create new agents or clone existing ones.
* **Edit Agents**: Change an agent's prompt, conversation flow, actions, analysis settings, post-conversation workflows, and widget config. Connect/disconnect integration tools, publish versions, revert to previous versions, and manage evaluations and test cases. Agent Managers and Developers also need [per-agent access](#agent-level-access-control).
* **Delete Agents**: Permanently delete agents.
* **Manage Agent Access**: Choose which Agent Managers and Developers can edit specific agents, and see which agents a member has access to. See [Agent-Level Access Control](#agent-level-access-control).

| Permission          | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ------------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Agents         |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Create Agents       |   ✅   |          |           |       ✅       |        ✅        |         |        |        |
| Edit Agents         |   ✅   |          |           |       ✅       |        ✅        |         |        |        |
| Delete Agents       |   ✅   |          |           |               |                 |         |        |        |
| Manage Agent Access |   ✅   |          |           |       ✅       |                 |         |        |        |

### Members

* **View Members**: See the member list with names, emails, roles, and join dates.
* **Invite Members**: Add new members by email and set their role.
* **Remove Members**: Remove a member from the organization.
* **Change Roles**: Change a member's role. Their sessions get revoked so they log in again with updated permissions.

| Permission     | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| -------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Members   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Invite Members |   ✅   |          |           |               |                 |         |        |        |
| Remove Members |   ✅   |          |           |               |                 |         |        |        |
| Change Roles   |   ✅   |          |           |               |                 |         |        |        |

### Campaigns

* **View Campaigns**: See campaigns, their status and stats, call lists with transcripts and analysis, and campaign config.
* **Manage Campaigns**: Create outbound campaigns with call lists, scheduling, and retry config. Archive/unarchive campaigns and remove call entries.
* **Run Campaigns**: Start, pause, and resume live outbound campaigns.

| Permission       | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ---------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Campaigns   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Campaigns |   ✅   |          |           |       ✅       |        ✅        |         |        |        |
| Run Campaigns    |   ✅   |          |           |       ✅       |        ✅        |         |    ✅   |        |

### Connections & Integrations

* **View Connections**: See which integrations (HubSpot, Salesforce, Slack, etc.) are set up and their status.
* **Manage Connections**: Add new integrations, delete existing ones, and test connections.

| Permission         | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ------------------ | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Connections   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Connections |   ✅   |     ✅    |           |               |                 |         |        |        |

### Secrets & API Keys

* **View Secrets**: See stored secrets (values are masked) and their descriptions. These are credentials that agents use during actions.
* **Manage Secrets**: Create, edit, and delete secrets for things like API keys, passwords, and external service credentials.
* **View API Keys**: See Strada API key names and creation dates.
* **Manage API Keys**: Create and delete Strada API keys.

| Permission      | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| --------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Secrets    |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |        |        |
| Manage Secrets  |   ✅   |     ✅    |           |               |                 |         |        |        |
| View API Keys   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |        |        |
| Manage API Keys |   ✅   |     ✅    |           |               |                 |         |        |        |

<Note>**Viewer** and **Tester** roles can't see secrets or API keys.</Note>

### Phone Numbers

* **View Phone Numbers**: See phone numbers, phone number groups, and coverage details.
* **Manage Phone Numbers**: Import phone numbers, change their settings and agent assignments, release numbers, and manage phone number groups.

| Permission           | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| -------------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Phone Numbers   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Phone Numbers |   ✅   |     ✅    |           |               |                 |         |        |        |

### Knowledge Bases

* **View Knowledge Bases**: See knowledge bases, uploaded files, download files, check sync status, and view version history.
* **Manage Knowledge Bases**: Create and delete knowledge bases, upload and remove files, trigger and review file syncs, scrape/crawl websites for content, and manage ingestion.

| Permission             | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ---------------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Knowledge Bases   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Knowledge Bases |   ✅   |          |           |       ✅       |        ✅        |    ✅    |        |        |

### Quality Assurance

* **View QA**: See QA rubrics and sentiment labels, view scoring results on individual calls and chats, and check backfill status.
* **Manage QA**: Create, edit, delete, and restore rubrics and sentiment labels. Generate AI-suggested rubrics, and trigger or cancel backfill scoring on past conversations.

| Permission | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ---------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View QA    |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage QA  |   ✅   |          |           |       ✅       |        ✅        |    ✅    |        |        |

### Conversations

* **View Conversations**: See call history, chat logs, and email threads. Listen to recordings, read transcripts, and submit feedback.
* **Manage Conversations**: Create, edit, delete, and reorder saved conversation views with custom filters and column layouts.

| Permission           | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| -------------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Conversations   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Conversations |   ✅   |          |           |       ✅       |        ✅        |    ✅    |    ✅   |        |

### Analytics & Reports

* **View Analytics**: See analytics dashboards, charts, and usage stats.
* **Manage Analytics**: Create, edit, and delete analytics views, charts, and filters. Use the AI analytics chat.
* **View Reports**: See the list of configured reports.
* **Manage Reports**: Create, edit, delete, and manually trigger reports.

| Permission       | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ---------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Analytics   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Analytics |   ✅   |          |     ✅     |               |                 |         |        |        |
| View Reports     |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Reports   |   ✅   |          |     ✅     |               |                 |         |        |        |

### Call Settings

* **View Schedules**: See business hour schedules that control when agents can make or receive calls.
* **Manage Schedules**: Create, edit, delete, and restore business hour schedules.
* **View Ended Reasons**: See call ended reasons used to categorize why calls ended.
* **Manage Ended Reasons**: Create, edit, and delete custom ended reasons for inbound and outbound calls. Rename built-in ended reasons.
* **View Call Retry Configs**: See retry configurations that control automatic retry behavior for failed calls.
* **Manage Call Retry Configs**: Create and edit retry rules, including intervals and max attempts.
* **View Test Numbers**: See phone numbers marked as test numbers.
* **Manage Test Numbers**: Add and remove test numbers. Calls to/from these numbers show up as "Test" in call history.
* **View Pronunciations**: See pronunciation dictionaries that control how the AI says specific words.
* **Manage Pronunciations**: Create, edit, and delete pronunciation entries.
* **View Do Not Call List**: See the do-not-call list and whether tracking is on.
* **Manage Do Not Call List**: Import and remove entries, and turn tracking on or off.

| Permission                | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ------------------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Schedules            |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Schedules          |   ✅   |          |           |       ✅       |        ✅        |         |        |        |
| View Ended Reasons        |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Ended Reasons      |   ✅   |          |           |       ✅       |        ✅        |         |        |        |
| View Call Retry Configs   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Call Retry Configs |   ✅   |          |           |       ✅       |        ✅        |         |    ✅   |        |
| View Test Numbers         |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Test Numbers       |   ✅   |          |           |               |                 |         |    ✅   |        |
| View Pronunciations       |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Pronunciations     |   ✅   |          |           |       ✅       |        ✅        |         |        |        |
| View Do Not Call List     |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Do Not Call List   |   ✅   |          |           |       ✅       |        ✅        |         |        |        |

### Widgets

* **View Widgets**: See widget configurations, themes, and allowed origins.
* **Manage Widgets**: Create, edit, delete, and set a default widget config. Manage allowed origins that control where widgets can be embedded.

| Permission     | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| -------------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Widgets   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Widgets |   ✅   |     ✅    |           |               |                 |         |        |        |

### Claims & Gaps

* **View Claims**: See claims data linked to conversations.
* **View Gaps**: See gap clusters that show where agents are struggling or missing knowledge.
* **Manage Gaps**: Update gap cluster status (e.g. mark as resolved or in progress).

| Permission  | Admin | IT Admin | Executive | Agent Manager | Agent Developer | Support | Tester | Viewer |
| ----------- | :---: | :------: | :-------: | :-----------: | :-------------: | :-----: | :----: | :----: |
| View Claims |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| View Gaps   |   ✅   |     ✅    |     ✅     |       ✅       |        ✅        |    ✅    |    ✅   |    ✅   |
| Manage Gaps |   ✅   |          |           |               |                 |    ✅    |        |        |

***

## Agent-Level Access Control

On top of role-based permissions, Strada has **per-agent access control** so you can manage exactly who can edit which agents. This is useful when multiple teams work on different agents.

### How It Works

* **Admins** can edit all agents, no restrictions.
* **Agent Managers** and **Agent Developers** need explicit edit access for each agent they want to modify.
* New Agent Managers and Developers start with no agent access. It has to be granted.

### Agent Manager vs Agent Developer

These two roles are mostly identical. The only difference is that Agent Managers can **control agent access** for other members:

| Capability                                      | Agent Manager | Agent Developer |
| ----------------------------------------------- | :-----------: | :-------------: |
| Create new agents                               |       ✅       |        ✅        |
| Edit agents (with per-agent access)             |       ✅       |        ✅        |
| Manage campaigns                                |       ✅       |        ✅        |
| Run campaigns                                   |       ✅       |        ✅        |
| Manage knowledge bases                          |       ✅       |        ✅        |
| Manage QA                                       |       ✅       |        ✅        |
| Manage schedules, pronunciations, ended reasons |       ✅       |        ✅        |
| **Control which agents other members can edit** |       ✅       |                 |

<Info>
  **Agent Managers** are like team leads. They can do everything Agent Developers can, plus grant or revoke
  agent edit access for other members.
</Info>

### Granting Agent Access

You can manage per-agent access in two places:

<Steps>
  <Step title="From the Agent">
    Go to an agent's settings and open the **Access** tab to see who can edit it and add or remove members.
  </Step>

  <Step title="From the Member">
    Go to a member's profile on the **Members** page and open the **Agent Access** tab to see which agents
    they can edit, and grant or revoke access.
  </Step>
</Steps>

<Warning>
  Removing agent access only blocks **editing**, not **viewing**. All roles can still see all agents.
</Warning>

***

## Role Summaries

Quick overview of what each role is for:

<AccordionGroup>
  <Accordion title="Admin">
    Full access to everything. Can manage members, assign roles, delete agents, and configure all organization settings.

    **Good for:** Org owners and senior managers who need full control.
  </Accordion>

  <Accordion title="IT Admin">
    Focused on infrastructure. Can manage integrations, secrets, API keys, phone numbers, and widgets. Has read access to everything else but can't modify agents, campaigns, or member roles.

    **Good for:** IT staff managing integrations and infrastructure.
  </Accordion>

  <Accordion title="Executive">
    Analytics and reporting access. Can create and manage dashboards and reports but can't modify agents or org settings.

    **Good for:** Leadership and stakeholders who need data visibility.
  </Accordion>

  <Accordion title="Agent Manager">
    Full agent-building permissions plus access management. Can create and edit agents, manage campaigns, and **control which agents other Agent Managers and Developers can edit**. Needs per-agent access to edit agents.

    **Good for:** Team leads overseeing a group of agent developers.
  </Accordion>

  <Accordion title="Agent Developer">
    Everything needed to build agents. Can create agents, manage campaigns, update knowledge bases, and configure call settings. Needs per-agent access to edit agents.

    **Good for:** People actively building and maintaining agents.
  </Accordion>

  <Accordion title="Support">
    Conversation review and quality management. Can manage QA rubrics, knowledge bases, gaps, and conversations. Can't create or edit agents.

    **Good for:** Support teams and QA analysts.
  </Accordion>

  <Accordion title="Tester">
    Can run campaigns, manage test numbers, and review conversations. Limited to testing-related actions.

    **Good for:** QA testers validating agent behavior.
  </Accordion>

  <Accordion title="Viewer">
    Read-only across the platform. Can browse agents, campaigns, conversations, analytics, etc. and submit conversation feedback. Can't see secrets or API keys.

    **Good for:** Stakeholders who need visibility without edit access.
  </Accordion>
</AccordionGroup>