> ## Documentation Index
> Fetch the complete documentation index at: https://docs.allgoodhq.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Users & Roles
## Adding Team Members
The process for adding new users depends on your authentication method.
### Social Sign-On (Google/Microsoft OAuth)
**Sending an invite**\
To add someone to your allGood instance, enter their email address and click **Invite User**. They'll receive an email invitation to join your organization.
Once invited, the user will appear as **Pending** in the users table until they accept the invitation and complete their first login.
### SAML/SSO Organizations
For organizations using SAML/SSO, you cannot directly invite users through allGood. Instead, your IT department needs to provision the user in your identity provider (Okta, Microsoft Entra ID, etc.) and grant them access to the allGood application.
**Access flow:**
1. IT provisions the user in your SSO system
2. IT grants the user access to the allGood application
3. User logs in through your company's SSO portal
4. User automatically appears in your allGood team list
***
## User Roles
The platform includes four roles, each building on the previous with additional capabilities:
### Basic User
**Best for:** New team members, contractors, or users who need limited access
* View existing worksheets and use pre-built templates
* Cannot create new content or access advanced features
### Basic Campaign User
**Best for:** New team members who need limited access to just running campaigns
* View existing campaign and use pre-built campaign templates
* Cannot use worksheets, or access advanced features
### Standard User
**Best for:** Regular team members who actively work with data
* All Basic User capabilities, plus:
* Create and edit worksheets
* View lab features (skills, teams, tools)
* Set up and manage integrations
### Power User
**Best for:** Advanced users, team leads, or technical specialists
* All Standard User capabilities, plus:
* Create and manage custom tools
* Create and edit teams
* Full access to lab management features
### Admin
**Best for:** IT administrators, system owners, or designated administrators
* Full access to all platform features
* Manage system settings and user accounts
* Configure Single Sign-On (SSO)
* Access event logs and audit trails
* Invite and remove users
***
## Permissions Matrix
| Feature | Basic | Basic Campaign | Standard | Power User | Admin |
| ------------------------------------ | ----- | -------------- | -------- | ---------- | ----- |
| **Worksheets** | | | | | |
| View existing worksheets | ✅ | ❌ | ✅ | ✅ | ✅ |
| Use worksheet templates | ✅ | ❌ | ✅ | ✅ | ✅ |
| Create and edit worksheets | ❌ | ❌ | ✅ | ✅ | ✅ |
| **Lab Features** | | | | | |
| View skills in the lab | ❌ | ❌ | ✅ | ✅ | ✅ |
| Create and edit skills | ❌ | ❌ | ❌ | ✅ | ✅ |
| View existing teams | ❌ | ❌ | ✅ | ✅ | ✅ |
| Create and edit teams | ❌ | ❌ | ❌ | ✅ | ✅ |
| View tool configurations | ❌ | ❌ | ✅ | ✅ | ✅ |
| Create and edit custom tools | ❌ | ❌ | ❌ | ✅ | ✅ |
| **System Features** | | | | | |
| Set up and manage integrations | ❌ | ❌ | ✅ | ✅ | ✅ |
| Manage system settings and view logs | ❌ | ❌ | ❌ | ❌ | ✅ |
| Manage users (invite, remove, etc.) | ❌ | ❌ | ❌ | ❌ | ✅ |
| **Campaigns** | | | | | |
| View campaigns | ❌ | ✅ | ✅ | ✅ | ✅ |
| Use campaigns | ❌ | ✅ | ✅ | ✅ | ✅ |
| Create and manage campaigns | ❌ | ✅ | ❌ | ✅ | ✅ |
***
## Managing Roles
To change a user's role:
1. Navigate to **Settings > Team** in allGood
2. Locate the user
3. Click their current role to open the role selector
4. Choose the appropriate role and save
**Best practices:**
* Start conservative — assign the minimum role needed
* Review roles periodically as responsibilities change
* Limit Admin access to essential personnel only
## Custom Roles and Access Control
Beyond the standard roles, allGood supports custom roles and granular access control to match your organization's specific needs.
### Custom Roles
Custom roles allow you to create tailored permission sets for different subteams within your organization. This is useful when:
* Different departments need access to different features
* You want to enforce specific guardrails for certain user groups
* Teams require exposure to only relevant templates and use cases
Custom roles are configured by the allGood team. Contact [support@allgoodhq.com](mailto:support@allgoodhq.com) to set up custom roles for your organization.
### Worksheet Access Control
You can control who has access to view, use, or manage specific worksheets:
1. Open the worksheet you want to configure
2. Navigate to the worksheet's **Settings**
3. Update which roles have access to:
* **View** — See the worksheet and its contents
* **Use** — Run the worksheet with their own data
* **Manage** — Edit the worksheet configuration
### Template Access Control
Templates have two layers of access control:
**Template visibility**\
In the template worksheet's settings, you can control which roles can see and use the template.
**Instance visibility**\
You can also control who has access to worksheets created from the template. For example, you can configure a template so that instances are only visible to the user who created them — ensuring each user only sees their own work.
Admins always have full access to all worksheets and templates, regardless of access control settings.
Custom roles are built by combining the following permissions:
| Permission | Description |
| ----------------------------- | ------------------------------------- |
| **Worksheets** | |
| `worksheets:view` | View existing worksheets |
| `worksheets:templates:use` | Use worksheet templates |
| `worksheets:manage` | Create, edit, and delete worksheets |
| **Campaigns** | |
| `campaign:view` | View campaigns |
| `campaign:use` | Run campaigns |
| `campaigns:manage` | Create, edit, and delete campaigns |
| **Lab — Skills** | |
| `lab:skills:view` | View skills in the lab |
| `lab:skills:manage` | Create, edit, and delete skills |
| **Lab — Teams** | |
| `lab:teams:view` | View existing teams |
| `lab:teams:manage` | Create, edit, and delete teams |
| **Lab — Tools** | |
| `lab:tools:view` | View tool configurations |
| `lab:tools:manage` | Create, edit, and delete custom tools |
| **Lab — Schemas** | |
| `lab:schemas:view` | View schemas |
| `lab:schemas:manage` | Create, edit, and delete schemas |
| **Integrations** | |
| `integrations:manage` | Set up and manage integrations |
| `widgets:integrations:manage` | Manage widget integrations |
| **System** | |
| `users:manage` | Invite, remove, and manage users |
| `system:manage` | Access system settings and logs |
***
## Need Help?
Contact your system administrator or reach out to [support@allgoodhq.com](mailto:support@allgoodhq.com).
***
## Troubleshooting
* **Social Sign-On**: Ensure they're using the correct Google/Microsoft account associated with your organization
* **SAML/SSO**: Verify with IT that the user is properly provisioned in your identity provider