RBAC & Permissions
Control who can do what with three role levels: Observer, Operator, and Admin.
The Three Roles
👁️ Observer
Read-only access. Monitor incidents and templates but can't create or modify anything.
Can: View incidents • View templates • View logs
Can't: Create incidents • Edit templates • Manage users
🎯 Operator
Execute incidents. Create and edit templates. The main day-to-day role.
Can: Create incidents • Execute incidents • Create/edit templates • Request approvals
Can't: Manage users • Change billing • Delete templates
⚙️ Admin
Full control. Manage users, settings, billing, and organization.
Can: Everything
Can't: Nothing (except delete the organization, and that's intentional)
Typical Setup
Most teams have: Admins (2-3 people managing everything), Operators (5-10 people creating/executing incidents), Observers (everyone else who monitors).
Managing Permissions
- 1.Go to Admin → User Management
- 2.Click on a user to edit their role
- 3.Select Observer, Operator, or Admin
- 4.Save changes (takes effect immediately)
Admins can see everything. Be careful about who you make admin. They can delete templates, remove users, and change billing.