ClawOS Permissions¶
ClawOS supports four user roles:
- Admin: has full create, read, update, and delete permissions on all features under Workspace View and Operations.
- Workspace Admin: has full create, read, update, and delete permissions on all features under the authorized workspace view.
- Workspace Editor: has update and read permissions on all features under the authorized workspace view.
- Workspace Viewer: has read permissions on all features under the authorized workspace view.
Each role has different permissions, which are described below.
| Menu Objects | Actions | Admin | Workspace Admin | Workspace Editor | Workspace Viewer |
|---|---|---|---|---|---|
| Workspace View | |||||
| Overview | View overview | ✓ | ✓ | ✓ | ✓ |
| ClawHub Management | View Skill Marketplace | ✓ | ✓ | ✓ | ✓ |
| OpenClaw Instances | View (can only view your own OpenClaw instances) | ✓ | ✓ | ✓ | ✗ |
| Create | ✓ | ✓ | ✓ | ✗ | |
| Edit (including edit/restart/power on/power off) | ✓ | ✓ | ✓ | ✗ | |
| Delete | ✓ | ✓ | ✓ | ✗ | |
| View all instances (can view all OpenClaw instances under the workspace) | ✓ | ✓ | ✗ | ✗ | |
| Manage all instances (can manage all OpenClaw instances under the workspace) | ✓ | ✗ | ✗ | ✗ | |
| Administrator View | |||||
| Overview | View overview | ✓ | ✓ | ✗ | ✗ |
| ClawHub Skill Management | View | ✓ | ✓ | ✗ | ✗ |
| Create | ✓ | ✓ | ✗ | ✗ | |
| Edit (including listing and delisting) | ✓ | ✓ | ✗ | ✗ | |
| Delete | ✓ | ✓ | ✗ | ✗ |