Understanding roles & permissions
See how organization roles and workspace roles work together to control what each person can see and do.
Health Data Explorer uses two layers of roles: your organization role, and your role in each workspace. Together, they determine what you can see and do.
Organization roles
Organization roles control what you can manage in the Org & Workspace section.
Role | What they can do |
|---|---|
Org Owner | Full control: manage members, licenses, and workspaces. |
Org Admin | Manage members, licenses, and workspaces. |
Org Member | View-only access to Overview, Licenses, and Workspaces. Doesn't see the Members tab. |
Workspace roles
In each workspace, a person has a role for each module they've been given access to, shown as, for example, Analytics: Admin. This role controls what they can do with that workspace's data, separately from their organization role.
For the Analytics module:
Workspace role | What they can do | Workspace tabs they see |
|---|---|---|
Owner | Full control of the workspace, including editing settings, deleting the workspace, managing dashboards, and saving filter templates. This is typically the person that created the workspace. | Overview, Analytics, Import Wizard, Public Dashboard*, Settings, My Dashboards*, Activity Log |
Admin | The same management abilities as the Owner. | Same as Owner |
Contributor | View and analyze data, and upload files with the Import Wizard. | Overview, Analytics, Import Wizard |
User | View-only access to the workspace's data and insights. | Overview, Analytics |
* Public Dashboard appears only after Public Workspace is turned on in Settings. My Dashboards appears only after a dashboard has been saved from Analytics. |
Note: Inviting people to a workspace and changing their roles is now done in Org & Workspace › Workspaces, not inside the workspace. [VERIFY: can workspace Owners and Admins who are Org Members do this, or only Org Owners and Org Admins?]
Why two layers?
Your organization role controls what you can manage at the organization level: members, licenses, and workspaces. Your workspace role controls what you can do with the data in a specific workspace and module. For example, an Org Member might still have Admin access to a workspace's Analytics module, even though they can't manage the organization itself.
Checking someone's access
If you're not sure what a teammate can see or do, check two places:
- Their organization role, on the Members tab.
- Their workspace role, under Workspaces › the workspace › Workspace access.
Updated on: 29/10/2026
Thank you!