> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leonardo-impact.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Permission matrix

> Every privilege in voi, broken down by role: billing, workspace, single-study, platform, and the public edge.

voi's roles split into five scopes: who pays, who runs a workspace. [Roles & access](https://docs.leonardo-impact.com/getting-started/roles-and-access.md) is the quick version of this; this page is the full reference, useful for a security or data-protection review.

## Roles

| Code | Role |
| - | - |
| WV | Workspace viewer |
| WE | Workspace editor |
| WO | Workspace owner |
| BA | Billing admin |
| BO | Billing owner |

## Reading the table

| Symbol | Meaning |
| - | - |
| ✅ | Yes |
| ⬜ | No |
| ⬛ | Not applicable to this role |
| 👤 | Only the first person to act, such as a workspace's creator |
| 🙋 | Themself only |

## Money (billing scope)

| Action | WV | WE | WO | BA | BO |
| - | - | - | - | - | - |
| Buy a study, plan, or top-up | ⬛ | ⬛ | ⬛ | ✅ | ✅ |
| Fund a workspace (earmark credits) | ⬛ | ⬛ | ⬛ | ✅ | ✅ |
| Revoke unused funding | ⬛ | ⬛ | ⬛ | ✅ | ✅ |
| Set the tier, ceiling, and auto-draw on funding | ⬛ | ⬛ | ⬛ | ✅ | ✅ |
| View invoices and the Stripe customer portal | ⬛ | ⬛ | ⬛ | ✅ | ✅ |
| See the credit balance and plan (the Share and Plans & credits pages) | ⬜ | ✅ | ✅ | ✅ | ✅ |
| Change the payment method | ⬛ | ⬛ | ⬛ | ⬜ | ✅ |
| Change organisation and tax details | ⬛ | ⬛ | ⬛ | ⬜ | ✅ |
| Invite, re-role, or remove billing members | ⬛ | ⬛ | ⬛ | ⬜ | ✅ |
| Close the billing account, or transfer ownership | ⬛ | ⬛ | ⬛ | ⬜ | ✅ |

## Crossing the boundary

| Action | WV | WE | WO | BA | BO |
| - | - | - | - | - | - |
| Request a purchase from billing | ⬜ | ✅ | ✅ | ✅ | ✅ |
| Create a workspace (the creator becomes its owner) | 👤 | 👤 | 👤 | 👤 | 👤 |
| Invite an organisation onto the platform | ⬜ | ⬜ | ⬜ | ✅ | ✅ |

## Workspace administration (controller acts)

| Action | WV | WE | WO | BA | BO |
| - | - | - | - | - | - |
| Accept the Data Processing Agreement (the controller's signatory) | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Set the privacy policy link | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Manage workspace members | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Grant or revoke single-study access, after launch | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Promote a study viewer to study editor | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Add or remove workspace co-owners (never a study-scoped role) | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Set the response ceiling | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Record the outcome of a respondent rights request | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |

## Studies & data

| Action | WV | WE | WO | BA | BO |
| - | - | - | - | - | - |
| Create, edit, or pretest a draft study | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Activate a study (generates the share link) | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Read the report, quotes, and media | ✅ | ✅ | ✅ | ⬛ | ⬛ |
| Query the data (Explore, "talk to your data") | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Re-run an analysis or a review (a manual re-run; an automated re-run on new data is unaffected) | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Create a report | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Comment on a report, including editing your own comments (a study viewer stays outside the comment thread) | ✅ | ✅ | ✅ | ⬛ | ⬛ |
| Export data | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Publish a shareable report link (a passcode is optional) | ⬜ | ✅ | ✅ | ⬛ | ⬛ |

## Deletion & erasure

One row per case, since "who can delete what" depends heavily on exactly what's being deleted.

| Action | WV | WE | WO | BA | BO |
| - | - | - | - | - | - |
| Erase one respondent's response (filed and executed at once, no review) | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Erase a study (as owner: immediate, unless a live share link or an exposed Explore answer forces a review; as editor: always reviewed once responses exist) | ⬜ | ✅ | ✅ | ⬛ | ⬛ |
| Erase a workspace (immediate only while it holds no response at all; refused while it's funded, or while a rights request is open) | ⬜ | ⬜ | ✅ | ⬛ | ⬛ |
| Erase your own account (always reviewed; a workspace you solely own is transferred, erased, or left orphaned, by your choice) | 🙋 | 🙋 | 🙋 | 🙋 | 🙋 |
| Approve, retry, or resume a queued erasure, and execute it (rejecting a request destroys nothing) | ⬜ | ⬜ | ⬜ | ⬛ | ⬛ |
| Delete a shared-report snapshot or an analysis cache (frozen verbatim quotes, no audit row) | ⬜ | ✅ | ✅ | ⬛ | ⬛ |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.