> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tessact.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspace Role Assignments

> When to use each workspace role and how to keep role assignment understandable.

## Overview

Workspace roles answer one question: what should this person be allowed to do inside this workspace?

The **Members** tab is where admins review those assignments in context.

<Frame caption="Workspace members table with the workspace-role column visible">
  <img src="https://mintcdn.com/tessact/Zj4-sgOsBzzd_RXr/images/admin/admin-workspace-members-live-v2.jpg?fit=max&auto=format&n=Zj4-sgOsBzzd_RXr&q=85&s=246612575f66ff5373271e74a299816c" alt="Workspace members and role assignments" width="1600" height="1000" data-path="images/admin/admin-workspace-members-live-v2.jpg" />
</Frame>

***

## Role Assignment Principles

Use workspace roles to express workspace-specific responsibility, not org-wide authority.

* give the lowest role that still matches the real job
* review roles when someone changes function inside the workspace
* avoid using workspace roles to compensate for unclear org roles

***

## When To Change A Workspace Role

Change the role when:

* a member becomes an active workspace operator
* a reviewer or collaborator no longer needs elevated access
* a temporary assignment ends
* a cleanup pass shows that role breadth no longer matches usage

***

## Guide: Keep Workspace Roles Clean

<Steps>
  <Step title="Start from the Members tab">
    Review the role column alongside name and activity so the assignment stays tied to actual workspace usage.
  </Step>

  <Step title="Use add-member flows to set the initial role well">
    When adding members, choose the correct workspace role at the point of entry instead of adding first and fixing later.

    <Frame caption="Add-members modal with workspace-role selection">
      <img src="https://mintcdn.com/tessact/Zj4-sgOsBzzd_RXr/images/admin/admin-workspace-add-members-live-v2.jpg?fit=max&auto=format&n=Zj4-sgOsBzzd_RXr&q=85&s=843de0e4724bbe682cd3a33c982168a2" alt="Add members to workspace with workspace role" width="1600" height="1000" data-path="images/admin/admin-workspace-add-members-live-v2.jpg" />
    </Frame>
  </Step>

  <Step title="Revisit elevated roles during access reviews">
    Roles should be one of the first things you revisit when a member looks dormant, overprovisioned, or no longer central to the workspace.
  </Step>
</Steps>

***

## Best Practices

* Keep elevated roles rare and reviewable.
* Align workspace role changes with real task ownership changes.
* Recheck roles whenever you review dormant access.
* Prefer role clarity over convenience.

***

## Next Steps

<Card title="Workspace membership reviews" arrow="true" horizontal href="/admin/workspaces/memberships">
  Return to the broader access review model inside a workspace.
</Card>

<Card title="Removing users safely" arrow="true" horizontal href="/admin/workspaces/removals">
  Use removal when the user should not stay in the workspace at all.
</Card>
