Skip to main content
Circuit uses a role-based access control system that lets you manage who can access what across your workspace.

User accounts

Each user in Circuit has an account with:
  • Email address: the primary identifier, used for login
  • Name: first and last name for display
  • Identity provider: how they authenticate (Google or Microsoft)
  • Status: active or inactive
Users can belong to one workspace and be members of multiple groups within that workspace.

Workspace roles

Every user in a workspace has one of three roles:

Adding users

To add a user to your workspace:
1

Navigate to user management

Open your workspace settings and go to the users section.
2

Invite by email

Enter the user’s email address. They’ll receive an invitation to join your workspace.
3

Assign a workspace role

Choose whether the new user should be a Member (default) or an Admin.
4

Grant access to resources

Share specific indexes and agents with the user, or add them to a group that already has the right access configured.

Removing users

When you remove a user from your workspace:
  • They lose access to all workspace indexes and agents
  • Their chat history is retained for audit purposes
  • They can still access any personal (non-workspace) resources they own

Index permissions

Each index has its own role assignments:

Agent permissions

Each agent also has role-based access:
Users only see agents and indexes that have been explicitly shared with them (directly or through a group). Workspace admins can see all resources.

Best practices

  • Use groups for team-level access instead of assigning permissions to individual users. See groups.
  • Start with Viewer and elevate permissions as needed.
  • Review permissions periodically: when people change roles or leave teams, update their access.
  • Use the Admin role sparingly: most users only need Viewer access to agents and indexes.