> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://helpdesk.healthdataexplorer.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Understanding roles & permissions

See how organization roles and workspace roles work together to control what each person can see and do.

Health Data Explorer uses two layers of roles: your **organization role**, and your **role in each workspace**. Together, they determine what you can see and do.
### Organization roles
Organization roles control what you can manage in the **Org & Workspace** section.
| Role | What they can do |
| ---- | ---- |
| Org Owner | Full control: manage members, licenses, and workspaces. |
| Org Admin | Manage members, licenses, and workspaces. |
| Org Member | View-only access to Overview, Licenses, and Workspaces. Doesn't see the Members tab. |
### Workspace roles
In each workspace, a person has a role for each module they've been given access to, shown as, for example, **Analytics: Admin**. This role controls what they can do with that workspace's data, separately from their organization role.

For the Analytics module:
| Workspace role | What they can do | Workspace tabs they see |
| ---- | ---- | ---- |
| Owner | Full control of the workspace, including editing settings, deleting the workspace, managing dashboards, and saving filter templates. This is typically the person that created the workspace. | Overview, Analytics, Import Wizard, Public Dashboard*, Settings, My Dashboards*, Activity Log |
| Admin | The same management abilities as the Owner. | Same as Owner |
| Contributor | View and analyze data, and upload files with the **Import Wizard**. | Overview, Analytics, Import Wizard |
| User | View-only access to the workspace's data and insights. | Overview, Analytics |
\* **Public Dashboard** appears only after **Public Workspace** is turned on in **Settings**. **My Dashboards** appears only after a dashboard has been saved from **Analytics**.
> **Note:** Inviting people to a workspace and changing their roles is now done in **Org & Workspace** › **Workspaces**, not inside the workspace. \[VERIFY: can workspace Owners and Admins who are Org Members do this, or only Org Owners and Org Admins?]
### Why two layers?
Your organization role controls what you can manage at the organization level: members, licenses, and workspaces. Your workspace role controls what you can do with the data in a specific workspace and module. For example, an Org Member might still have Admin access to a workspace's Analytics module, even though they can't manage the organization itself.
### Checking someone's access
If you're not sure what a teammate can see or do, check two places:
* Their organization role, on the **Members** tab.
* Their workspace role, under **Workspaces** › the workspace › **Workspace access**.