Workspace roles and permissions
An overview of SCHMA's built-in membership roles—Owner, Admin, Editor, and Reviewer—and custom role permission boundaries across workspaces.
Before you begin
- A SCHMA workspace
- Owner or Admin role to invite or manage team members (Free supports up to 2 members including the owner, Pro supports up to 5 members)
Access control in SCHMA is structured around workspace membership. Every workspace maintains an independent roster of members with assigned roles that govern access to database settings, schema modeling, content editing, and publishing operations.
Workspace membership roles overview
SCHMA provides four standard, built-in membership roles alongside configurable custom roles:
- Owner (`owner`): The primary administrative authority for the workspace. Owners manage subscription billing, database credentials, team invitations, and can transfer workspace ownership or delete the workspace.
- Admin (`admin`): Technical administrators responsible for day-to-day operations. Admins can create and modify content models, generate API keys, configure webhooks, add environments, and invite Editors or other Admins.
- Editor (`editor`): Content creators and copywriters. Editors can create, edit, save drafts, and publish entries across authorized content models. Editors cannot alter database connections, schema architectures, or API credentials.
- Reviewer (`reviewer`): Read-and-comment collaborators. Reviewers can inspect content models and entries, and post comments on draft entries. Reviewers cannot edit entry fields, create or delete entries, publish or schedule content, restore version snapshots, manage workspace settings, or resolve comments.
Role capabilities comparison
| Capability | Owner | Admin | Editor | Reviewer |
|---|---|---|---|---|
| Manage Billing & Subscription | Yes | No | No | No |
| Configure Database Connection | Yes | No | No | No |
| Delete or Transfer Workspace | Yes | No | No | No |
| Create & Evolve Content Models | Yes | Yes | No | No |
| Generate & Revoke API Keys | Yes | Yes | No | No |
| Configure Webhooks & Environments | Yes | Yes | No | No |
| Invite & Remove Workspace Members | Yes | Yes | No | No |
| Create, Edit, and Publish Entries | Yes | Yes | Yes | No |
| Upload & Manage Media Assets | Yes | Yes | Yes | No |
| View Entries & Submit Comments | Yes | Yes | Yes | Yes |
Reviewer role boundaries and commenting
The Reviewer role is a dedicated, built-in membership tier designed specifically for external stakeholders, legal counsel, and clients who need visibility into content and the ability to submit feedback without risk of modifying data. Reviewers can read entries and participate in comment threads, but have no edit, publish, schedule, or version-restoration capabilities. They also cannot resolve comments posted by other team members.
Plan requirements for team collaboration
SCHMA's Free tier supports up to 2 workspace members, including the owner. This allows solo developers or founders to collaborate directly with a colleague. Expanding beyond 2 members (up to 5 members) and accessing broader collaborative workflows requires upgrading to a Pro workspace plan.