Workspace User Role Definitions

About roles

Roles are assigned per Workspace, so the same account can be an Owner in one Workspace and a User in another. Your role is what sets your permissions, separately from whether your organization works with DDx as a Data Owner or a Tech Partner and from the dashboard view you have selected.

Organizational Workspaces are the only Workspace type that allows inviting, removing, and re-roling users. A Personal Workspace has exactly one user, so it has no user administration.

Any user can request an Organizational Workspace, whatever their role in an existing one. See Add or Set Up A New Organizational Workspace.

Owner

• Invite other Owners, Admins, and Users
• Remove other Owners, Admins, and Users
• Demote another Owner to Admin or User. Owners are the only role that can change the role of a peer
• All other Admin-level permissions

Admin

• Create Dataset Exchange API (DXAPI) and Interactions API Apps in the Workspace, from the Create & Manage Applications area of the Console. A new App is visible only to the Workspace that created it; making a Production App available to other Workspaces requires DDx approval, described in App Environments and Sharing Rules
• Install DXAPI Apps in the Workspace and remove installed Apps
• Generate and revoke an App's private keys, which sign the system-level JWT that App exchanges for a Dataset Exchange API access token
• Provision, update, and revoke Interactions API keys, which grant a Tech Partner's App access to this Workspace's data
• Add and manage the Workspace's External Keys, currently VAN API keys only, used when VAN Canvass Responses is a Destination on an Interactions API key. VAN as a Destination is enabled per Workspace, so contact DDx if you do not see the External Keys area. See VAN Canvass Responses as a Destination
• Create and manage Admin API keys, used to manage Workspaces and their keys programmatically
• Change the role of Users in the Workspace. An Admin can only change the role of someone below them, never another Admin or an Owner, and no one can change their own role
• All other User-level permissions

User

• View the Workspace ID, the Workspace's users, its installed Apps, and its datasets
• Permission datasets to installed Apps
• Delete datasets in a Workspace using the DDx API Console