Who can do what

In the organisation

	Owner	Admin	Member
Open files	Everything	What their custom roles allow	What their custom roles allow
Invite people and cancel invitations	Yes	Yes	No
Change Members’ and Admins’ roles, remove them	Yes	Yes	No
Make someone Owner, or remove an Owner	Yes	No	No
Create, edit, and delete custom roles	Yes	Yes	No
See the audit log	Yes	Yes	No
Test connections	Yes	Yes	No
Add, edit, and delete connections	Yes	No	No
Create buckets	Yes	No	No
Rename the organisation	Yes	No	No
Connect and revoke their own AI clients	Yes	Yes	Yes
See and revoke everyone’s AI clients	Yes	Yes	No
Leave the organisation from People	Yes, unless the last Owner	Yes	No, ask an Owner or Admin

File actions

Action	Needs
See a bucket on Buckets, browse, preview, download	Read
Upload, overwrite, create folders	Write
Delete files and empty folders	Delete
Create a share link	Read and Share
Create a file request	Write and Share
See and revoke your own links on Shared links	Nothing extra

Owners don’t need rules. For everyone else, at least one Allow rule must match and no Deny rule in any of their roles. The connection’s bucket scopes and the storage key can limit things further, for everyone.

Outside the organisation

Someone with a share link can download that one file until the link expires, without an account. The link stops working early if it’s revoked, if the person who created it loses Read or Share on the file or leaves the organisation, or if an Owner or Admin switches share links off.

Someone with a file request can upload files into one folder until the link expires or reaches its limits, without an account. They can’t see, download, or change anything in the folder. The link stops working early if it’s revoked, if its creator loses Write or Share on the folder or leaves the organisation, or if an Owner or Admin switches file requests off.

An AI client can do what the roles its user approved allow, until the access expires or is revoked. With Read it can list and create download links, with Read and Share it can create share links, and with Write it can upload. It can never delete, create folders, or manage anything. Links it creates stop working when its access ends.