Access rights model (RBAC)

Levels: Account / Workspace

Access rights in Contradic work at two levels. The account level controls who belongs to the account and what they can do across all workspaces. The workspace level controls what each member can do inside a specific workspace.

Where you manage each level:

• Account-level access lives in Account settings, where you invite people and set their overall role.
• Workspace-level access lives in each workspace, where you can fine-tune who can view or edit that workspace.

Common entry points:

1. Open the account menu (your avatar in the sidebar) with and choose Account Settings to manage account-level access.
2. Inside a workspace, use Add members to manage workspace-level access.

If you are new to the difference between accounts and workspaces, see Key concepts in Contradic.

Roles: Admin, Collaborator, Guest

Every member has a role at the account level and can have a different role in each workspace. Use roles to match what people need to do, and no more.

Role overview:

• Admin: Can invite or remove members, manage access, and run most day-to-day operations.
• Collaborator: Can create and edit documents, notes, and views, and run AI Experts when they need guided analysis.
• Guest: Can view documents, notes, and views, but cannot change them.

Tip: If someone only needs to review information, keep them as a Guest. If they need to contribute or edit, move them to Collaborator.

To learn how invitations and role changes work, jump to the full guide:

Invite and manage collaborators

Permissions table

Use this table as a quick reference. If someone has both account and workspace access, the more restrictive setting wins inside that workspace.

Action	Admin	Collaborator	Guest
View documents, notes, and views	✅	✅	✅
Create or edit documents, notes, and views	✅	✅	❌
Manage workspace access	✅	❌	❌
Invite members at the account level	✅	❌	❌
Manage billing and plan	✅ (Account owner)	❌	❌

Need a quick reminder on invitations? See Invite and manage collaborators.