MetaLens360Help Center

Roles and permissions

MetaLens360 has six workspace roles — Admin, Architect, Release Manager, DevOps, Developer and Viewer. Admins can tailor what each role may do in Settings → Roles & Permissions.

Updated in Administration & security

Overview

Every member of a workspace has one role. The role decides which actions they can take — for example, running a sync, managing org connections or changing AI providers. Everyone in the workspace can view the same dashboards and analysis; roles mostly control what people can change or run.

Each workspace has its own permission matrix. Changing it affects only your workspace.

Before you start

  • Only workspace Admins can edit the matrix. Others see it read-only with "Only workspace admins can edit roles & permissions."
  • The Admin role always has every permission. Its column is locked ("Admin always has every permission").
  • Inviting, removing and changing members' roles is always Admin-only, whatever the matrix says.

The six roles

RoleTypical personDefault abilities
AdminWorkspace ownerEverything, including team management and editing this matrix
ArchitectSalesforce architectAll configuration (AI, schedules, connections, general settings), all operations, deletion
Release ManagerRelease or QA leadSync schedules plus all operations
DevOpsPlatform engineerSync schedules and connections plus all operations
DeveloperSalesforce developerAll operations (sync, index, compare, snapshots, test, access scans)
ViewerStakeholder or auditorRead only

Default permission matrix

PermissionAdminArchitectRelease ManagerDevOpsDeveloperViewer
Manage AI providers & chainYesYes————
Manage sync schedulesYesYesYesYes——
Manage org/Git connectionsYesYes—Yes——
Manage general settingsYesYes————
Manage users & rolesYes—————
Run sync on demandYesYesYesYesYes—
Run access scans & triageYesYesYesYesYes—
Run comparisonYesYesYesYesYes—
Index / re-index orgsYesYesYesYesYes—
Create/manage QA snapshotsYesYesYesYesYes—
Test connectionsYesYesYesYesYes—
View dashboards & analysisYesYesYesYesYesYes
View Access 360YesYesYesYesYesYes
View comparison resultsYesYesYesYesYesYes
Delete connections / dataYesYes————

Hover a permission name in the app to see its description.

Steps

Change what a role can do

  1. Open Settings and choose Roles & Permissions (under Enterprise), or go to /settings?tab=roles.
  2. Find the permission row and the role column.
  3. Tick or clear the box.
  4. Click Save changes. You see "Permissions saved." The change applies to everyone with that role straight away.

Go back to the defaults

  1. Click Reset to defaults.
  2. Confirm Reset in Reset to defaults?. You see "Permissions reset to defaults."

Change a person's role

Roles are assigned per person in Settings → Users. See Invite your team.

Example

Acme's release managers also own the org connections. Priya (Admin) opens Roles & Permissions, ticks Manage org/Git connections for Release Manager, and clicks Save changes. Lee, a Viewer, still can't run syncs — a good fit for auditors who need to see everything but change nothing.

FAQs

Can I create custom roles?

Not currently. You adjust what the six built-in roles can do.

Can I hide dashboards from a role?

View dashboards & analysis and View comparison results are always available to every member. View Access 360 can be cleared for a role to hide Access 360 data.

Troubleshooting

"Your role does not have permission to do this (sync.run)"

The text in brackets is the permission your role is missing — here, Run sync on demand. Ask an Admin to change your role or tick that permission for your role. See Permission denied errors.

"Could not save permissions."

Check you're still an Admin and try again. If it persists, reload the page.

The checkboxes are greyed out

You're not an Admin, or you're looking at the Admin column, which is always fully granted.

Was this article helpful?

Related articles