RBAC & Permissions

Control who can do what with three role levels: Observer, Operator, and Admin.

The Three Roles

👁️ Observer

Read-only access. Monitor incidents and templates but can't create or modify anything.

Can: View incidents • View templates • View logs
Can't: Create incidents • Edit templates • Manage users

🎯 Operator

Execute incidents. Create and edit templates. The main day-to-day role.

Can: Create incidents • Execute incidents • Create/edit templates • Request approvals
Can't: Manage users • Change billing • Delete templates

⚙️ Admin

Full control. Manage users, settings, billing, and organization.

Can: Everything
Can't: Nothing (except delete the organization, and that's intentional)

Typical Setup

Most teams have: Admins (2-3 people managing everything), Operators (5-10 people creating/executing incidents), Observers (everyone else who monitors).

Managing Permissions

  1. 1.Go to Admin → User Management
  2. 2.Click on a user to edit their role
  3. 3.Select Observer, Operator, or Admin
  4. 4.Save changes (takes effect immediately)

Admins can see everything. Be careful about who you make admin. They can delete templates, remove users, and change billing.