Permission reference
SQRL has 11 named permissions. All permissions are workspace-scoped unless otherwise noted. Roles are built by combining these permissions. See Roles and permissions.
Updated 05 Aug 20261 min read
| Permission | Controls | Typical use |
|---|---|---|
| Owner | Full access; bypasses all permission checks | Organisation-level administration. Cannot be assigned manually. |
| Manage Workspace | Workspace configuration, vault management, token deployment, and contract operations | Administrators managing workspace-level operations |
| Manage Users | Add, edit, and deactivate users in the workspace | User management |
| Manage Roles | Create, edit, and delete roles | Role administration |
| Manage Permissions | Assign permissions to roles | Permission configuration |
| Initiate Payment | Create and submit movements | Movement initiators |
| Approve Payment | Sign pending movements and deployments | Authorised signers |
| View Balances | View vault and token balances | All operational roles |
| View Logs | Access the activity and audit log and export log data | Auditors and compliance staff |
| Create Workspace | Create new workspaces within the organisation | Organisation-level administration |
| Delete Workspace | Delete a workspace | Organisation-level administration |
info:
Only the Owner permission is fixed. Every other permission can be combined into roles of your own design. The standard roles (Admin, Approver, Initiator, Auditor) are suggested starting points, not fixed system roles.
Was this page helpful?