Role Based Access Control (RBAC)

Overview

Formo uses workspace roles to control what each teammate can view or change.

Owner: Full access to the workspace. Owners can invite admins, transfer ownership, delete the workspace, and delete projects. Each workspace has one owner.
Admin: Full access to the workspace. Can manage members, roles, and settings but cannot invite admins or delete the workspace and projects.
Editor: Can manage projects, forms, contracts, charts, dashboards, and alerts. Editors cannot manage members, workspace settings, and key project settings.
Viewer: Read-only access to projects and forms.

User Roles and Permissions

Action	Owner	Admin	Editor	Viewer
Workspace
View workspace members	✅	✅	❌	❌
Add, remove, and manage members	✅	✅	❌	❌
Manage roles of members	✅	✅	❌	❌
Access and manage workspace settings	✅	✅	❌	❌
Manage billing	✅	✅	❌	❌
View workspace usage	✅	✅	❌	❌
Upgrade / downgrade workspace	✅	✅	❌	❌
Delete the workspace	✅	❌	❌	❌
Transfer ownership to another member	✅	❌	❌	❌
Projects
View projects	✅	✅	✅	✅
Verify projects	✅	✅	✅	✅
Access project settings page	✅	✅	✅	❌
Create & rename projects	✅	✅	❌	❌
Manage project integrations	✅	✅	❌	❌
Manage project notifications	✅	✅	❌	❌
Edit lifecycle thresholds	✅	✅	❌	❌
Delete projects	✅	❌	❌	❌
Contracts
View contracts	✅	✅	✅	✅
Manage contracts	✅	✅	✅	❌
Deploy contract events pipeline	✅	✅	❌	❌
Segments
View project segments	✅	✅	✅	✅
Create, delete, edit project segments	✅	✅	✅	❌
Charts, Dashboards & Explorer
View charts and dashboards	✅	✅	✅	✅
Create, delete, edit charts	✅	✅	✅	❌
Create dashboards	✅	✅	✅	❌
Explorer (SQL editor and wallet search)	✅	✅	✅	❌
Users
View wallet profiles	✅	✅	✅	✅
View sensitive profile data (wallet labels, socials, clusters, custom properties)	✅	✅	✅	✅*
Import wallets	✅	✅	✅	❌
Edit profile properties and labels	✅	✅	✅	❌
Alerts
View project alerts	✅	✅	✅	✅
Create, delete, edit project alerts	✅	✅	✅	❌
Forms
View forms and responses	✅	✅	✅	✅
Manage form responses	✅	✅	✅	❌
Create and edit forms	✅	✅	✅	❌
Archive forms	✅	✅	✅	❌
Close forms	✅	✅	✅	❌
Data & Access
Manage API Keys	✅	✅	❌	❌
MCP	✅	✅	❌	❌
Create BI auth tokens	✅	✅	❌	❌
View audit logs	✅	✅	❌	❌
Agent Memory (Ask AI)
Manage agent memory	✅	✅	❌	❌

* Sensitive profile data (wallet labels, socials, clusters, and custom properties) is visible to Viewers by default. An Owner or Admin can hide this data from Viewers with a per-project setting.

​Overview

​User Roles and Permissions

Overview

User Roles and Permissions