Skip to main content
Quint has four roles, highest privilege first. Each role can do everything the role below it can. The dashboard describes them this way under Settings › Members:
  • Owner: “Everything an Admin reaches, and more. The last owner cannot be removed.”
  • Admin: “Everything a Policy Writer reaches, and more.”
  • Policy Writer: “Everything a Read member reaches, and more.”
  • Read: “Every member can read all workspace data.”
Roles are enforced server-side on every call. Membership is re-read on every request, so a removal or a role change takes effect on the member’s next action.

​
What each role can do

​
Two things that are not roles

Approvers. Deciding a held tool call is not a role. Each workload names its approvers under Approvers › Change approvers. The Approvals queue lists only requests you can approve, so for anyone who is not an approver it is empty. Any member can see a run’s requests, with status and who decided them, on that run’s page under Workloads; only an approver gets a Decide link there. A Read member is never an approver; on the Approvals page filtered to one run (/approvals?run_id=) it is told “Viewers can see requests but cannot decide them.” See Decide an approval. Partner access. If a partner operates your workspace, their delegated session can read but “cannot see or decide approvals” and cannot change integrations. You can end a partner session or revoke standing access under Settings › Partner access.

​
Hidden features

Admins and Owners can hide parts of the product from Read and Policy Writer members under Settings › Members › Feature visibility. Hidden features disappear from the member’s navigation on their next page load. Admins and Owners always see everything, so a change can always be undone.

​
Where to change a role

Settings › Members, the Manage Role action on a member’s row. Admin or Owner. See Members and access. You can change or remove only members whose current role is at or below your own. An Admin can change or remove a Read member, a Policy Writer or another Admin. Only an Owner can change or remove an Owner, and the last owner cannot be removed.