Security & ProductionGuide
Roles and access
Role-based access inside a workspace.
Access model
Roles are held separately from user profile data and are evaluated server-side, so a client can never elevate its own privileges. Membership and access are managed in Settings → Members & access.