> ## Documentation Index
> Fetch the complete documentation index at: https://docs.circuit.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Users and permissions

> Manage user accounts, assign roles, and control access to indexes and agents in your workspace.

Circuit uses a role-based access control system that lets you manage who can access what across your workspace.

## User accounts

Each user in Circuit has an account with:

* **Email address**: the primary identifier, used for login
* **Name**: first and last name for display
* **Identity provider**: how they authenticate (Google or Microsoft)
* **Status**: active or inactive

Users can belong to one workspace and be members of multiple groups within that workspace.

## Workspace roles

Every user in a workspace has one of three roles:

| Role              | Capabilities                                                                                                                  |
| ----------------- | ----------------------------------------------------------------------------------------------------------------------------- |
| **Primary owner** | Full control over the workspace, including billing, all indexes, all agents, and all users. Cannot be removed.                |
| **Admin**         | Can manage users, indexes, and agents. Can create and configure resources. Cannot change billing or remove the primary owner. |
| **Member**        | Can access indexes and agents shared with them. Cannot create or configure workspace-level resources.                         |

## Adding users

To add a user to your workspace:

<Steps>
  <Step title="Navigate to user management">
    Open your workspace settings and go to the users section.
  </Step>

  <Step title="Invite by email">
    Enter the user's email address. They'll receive an invitation to join your workspace.
  </Step>

  <Step title="Assign a workspace role">
    Choose whether the new user should be a **Member** (default) or an **Admin**.
  </Step>

  <Step title="Grant access to resources">
    Share specific indexes and agents with the user, or add them to a [group](/admin/groups) that already has the right access configured.
  </Step>
</Steps>

## Removing users

When you remove a user from your workspace:

* They lose access to all workspace indexes and agents
* Their chat history is retained for audit purposes
* They can still access any personal (non-workspace) resources they own

## Index permissions

Each index has its own role assignments:

| Role       | Can view content | Can upload documents | Can delete documents | Can manage settings |
| ---------- | ---------------- | -------------------- | -------------------- | ------------------- |
| **Owner**  | Yes              | Yes                  | Yes                  | Yes                 |
| **Admin**  | Yes              | Yes                  | Yes                  | Yes                 |
| **Viewer** | Yes              | No                   | No                   | No                  |

## Agent permissions

Each agent also has role-based access:

| Role       | Can chat | Can edit configuration | Can manage sharing | Can delete |
| ---------- | -------- | ---------------------- | ------------------ | ---------- |
| **Owner**  | Yes      | Yes                    | Yes                | Yes        |
| **Admin**  | Yes      | Yes                    | Yes                | No         |
| **Viewer** | Yes      | No                     | No                 | No         |

<Note>
  Users only see agents and indexes that have been explicitly shared with them (directly or through a group). Workspace admins can see all resources.
</Note>

## Best practices

* **Use groups** for team-level access instead of assigning permissions to individual users. See [groups](/admin/groups).
* **Start with Viewer** and elevate permissions as needed.
* **Review permissions periodically**: when people change roles or leave teams, update their access.
* **Use the Admin role sparingly**: most users only need Viewer access to agents and indexes.