Skip to main content
Hebno controls access at five levels: organisation role, project role, library policy, agent access and integration access. This page lists what each level allows.

Organisation roles

Every person in an organisation is an Owner, an Admin or a Member. The owner is the person who created the workspace. Ownership cannot be granted by invitation, role change or domain rule, and the owner cannot be suspended. Owners and admins have the same powers. The only difference is that the owner’s role is locked. Nobody can change their own role, and an invitation can grant only Admin or Member. Members who open an admin page are returned to chat.

Project roles

Each project has its own roles, set under the project’s Settings → Members. Organisation owners and admins count as project admins on every project. A project always has at least one admin. In Sessions, chats are shared with project members by default, and a person can mark theirs Private to hide it from teammates.

Chat roles

A shared chat has its own roles: Owner (rename, delete, manage access, send), Collaborator (send messages) and Viewer (read only). A chat always has one owner. See Share a chat.

Library contributors

Everyone in the organisation can read the library. Who can add or remove content is a policy under Admin → Organisation brain → Library contributions: See Workspace library.

Agent access

Set this under Access on the agent form. Writes an agent proposes are pending under Agents → Approvals until a person confirms them. See Agent approvals.

Integration access

Integration access has two parts, and both must allow an action. Financial figures in organisation connections default to owners and admins only. A confirmed write always needs the member to select Confirm or Send. See Connected systems.

Suspension

Owners and admins can suspend a member under Admin → Members. A suspended person loses access to the organisation immediately and cannot sign in to it or use the add-ins. Their account and history are kept, and an admin can reactivate them at any time. You cannot suspend yourself or the owner.

Members

Invite, edit and suspend people.

Connected systems

How connection types limit access.

Organisations, teams and members

How teams group people.

Audit trail

Role and access changes are recorded.