V77 Trust
Start free trial

Roles and permissions: who can do what

The four roles, what each can do, and how to choose the right one for each person.

2 min read·Updated 8 November 2026Admins

Every member of a workspace has one role. Roles are ordered: each one can do everything the one below it can.

The four roles

  • Auditor: reads everything, changes nothing. Use it for internal audit, external auditors and anyone who only needs to look.
  • Reviewer: everything an auditor can do, plus approving or rejecting requests and signing off. Use it for compliance and risk people.
  • AI owner: adds and edits AI systems, controls, evidence, findings and incidents. Use it for the people who run AI systems day to day.
  • Admin: everything, plus members, roles, API keys, billing and workspace settings.

Rules that always apply

  • Nobody can approve their own approval request. Someone else has to decide.
  • Auditors can't change data anywhere, including through the API.
  • Every change is recorded in the activity log with the person who made it.

Inviting people

  1. 1
    Go to Settings → Team & workspace.
  2. 2
    Enter their email and pick a role.
  3. 3
    They get an email with a link that expires. When they accept, admins are notified.
Tip

Give people the lowest role that lets them do their job. You can raise it later in one click.

API keys

API keys have roles too. A key for a reporting dashboard should be Auditor; a key that a CI pipeline uses to upload evidence needs AI owner. See the developer documentation for details.

Ready to try it in V77 Trust?Open Settings →

Related