Roles Reference
This page summarizes the roles you may see in Orbit.
Workspace roles
Section titled “Workspace roles”Workspace roles come from Microsoft 365-backed access.
| Role | Meaning |
|---|---|
| read | Can view accessible workspace content. |
| write | Can create and edit workspace content where Microsoft 365 allows it. |
| manager | Can manage workspace-level settings when that role is shown for the workspace. |
| owner | Owns or administers the connected Microsoft 365 location when Microsoft 365 grants that authority. |
Note-share roles
Section titled “Note-share roles”Note-specific shares use simpler roles.
| Role | Meaning |
|---|---|
| read | Can view the shared note. |
| write | Can edit the shared note. |
Tenant roles
Section titled “Tenant roles”Tenant roles control organization admin access.
| Role | Meaning |
|---|---|
| member | Normal user. |
| tenant admin | Can access admin views where allowed. |
| tenant owner | Can manage tenant roles and high-risk tenant actions. |
Role precedence
Section titled “Role precedence”If someone has access through more than one route, the effective result depends on Microsoft 365 permissions and any note-specific share. When in doubt, review the Microsoft 365 location and Orbit’s manage access view.