Permission matrix

voi’s roles split into five scopes: who pays, who runs a workspace. Roles & access is the quick version of this; this page is the full reference, useful for a security or data-protection review.

Roles

Code	Role
WV	Workspace viewer
WE	Workspace editor
WO	Workspace owner
BA	Billing admin
BO	Billing owner

Reading the table

Symbol	Meaning
✅	Yes
⬜	No
⬛	Not applicable to this role
👤	Only the first person to act, such as a workspace’s creator
🙋	Themself only

Money (billing scope)

Action	WV	WE	WO	BA	BO
Buy a study, plan, or top-up	⬛	⬛	⬛	✅	✅
Fund a workspace (earmark credits)	⬛	⬛	⬛	✅	✅
Revoke unused funding	⬛	⬛	⬛	✅	✅
Set the tier, ceiling, and auto-draw on funding	⬛	⬛	⬛	✅	✅
View invoices and the Stripe customer portal	⬛	⬛	⬛	✅	✅
See the credit balance and plan (the Share and Plans & credits pages)	⬜	✅	✅	✅	✅
Change the payment method	⬛	⬛	⬛	⬜	✅
Change organisation and tax details	⬛	⬛	⬛	⬜	✅
Invite, re-role, or remove billing members	⬛	⬛	⬛	⬜	✅
Close the billing account, or transfer ownership	⬛	⬛	⬛	⬜	✅

Crossing the boundary

Action	WV	WE	WO	BA	BO
Request a purchase from billing	⬜	✅	✅	✅	✅
Create a workspace (the creator becomes its owner)	👤	👤	👤	👤	👤
Invite an organisation onto the platform	⬜	⬜	⬜	✅	✅

Workspace administration (controller acts)

Action	WV	WE	WO	BA	BO
Accept the Data Processing Agreement (the controller’s signatory)	⬜	⬜	✅	⬛	⬛
Set the privacy policy link	⬜	⬜	✅	⬛	⬛
Manage workspace members	⬜	⬜	✅	⬛	⬛
Grant or revoke single-study access, after launch	⬜	⬜	✅	⬛	⬛
Promote a study viewer to study editor	⬜	✅	✅	⬛	⬛
Add or remove workspace co-owners (never a study-scoped role)	⬜	⬜	✅	⬛	⬛
Set the response ceiling	⬜	✅	✅	⬛	⬛
Record the outcome of a respondent rights request	⬜	⬜	✅	⬛	⬛

Studies & data

Action	WV	WE	WO	BA	BO
Create, edit, or pretest a draft study	⬜	✅	✅	⬛	⬛
Activate a study (generates the share link)	⬜	⬜	✅	⬛	⬛
Read the report, quotes, and media	✅	✅	✅	⬛	⬛
Query the data (Explore, “talk to your data”)	⬜	✅	✅	⬛	⬛
Re-run an analysis or a review (a manual re-run; an automated re-run on new data is unaffected)	⬜	✅	✅	⬛	⬛
Create a report	⬜	✅	✅	⬛	⬛
Comment on a report, including editing your own comments (a study viewer stays outside the comment thread)	✅	✅	✅	⬛	⬛
Export data	⬜	✅	✅	⬛	⬛
Publish a shareable report link (a passcode is optional)	⬜	✅	✅	⬛	⬛

Deletion & erasure

One row per case, since “who can delete what” depends heavily on exactly what’s being deleted.

Action	WV	WE	WO	BA	BO
Erase one respondent’s response (filed and executed at once, no review)	⬜	✅	✅	⬛	⬛
Erase a study (as owner: immediate, unless a live share link or an exposed Explore answer forces a review; as editor: always reviewed once responses exist)	⬜	✅	✅	⬛	⬛
Erase a workspace (immediate only while it holds no response at all; refused while it’s funded, or while a rights request is open)	⬜	⬜	✅	⬛	⬛
Erase your own account (always reviewed; a workspace you solely own is transferred, erased, or left orphaned, by your choice)	🙋	🙋	🙋	🙋	🙋
Approve, retry, or resume a queued erasure, and execute it (rejecting a request destroys nothing)	⬜	⬜	⬜	⬛	⬛
Delete a shared-report snapshot or an analysis cache (frozen verbatim quotes, no audit row)	⬜	✅	✅	⬛	⬛

Getting started

Using voi

Methodology

Compliance & security

Account & billing

Troubleshooting & FAQ

Roles

Reading the table

Money (billing scope)

Crossing the boundary

Workspace administration (controller acts)

Studies & data

Deletion & erasure

​Roles

​Reading the table

​Money (billing scope)

​Crossing the boundary

​Workspace administration (controller acts)

​Studies & data

​Deletion & erasure

Roles

Reading the table

Money (billing scope)

Crossing the boundary

Workspace administration (controller acts)

Studies & data

Deletion & erasure