---
title: "Roles and permissions"
space: "Raven"
url: "https://docs.frappe.io/raven/administration/roles-and-permissions"
updated: "2026-11-07"
---

What you can do in Raven depends on your roles on the Frappe site, and on whether you are an admin of a workspace or a channel.

## Site roles

Site roles are set on the user in Desk and apply to all of Raven.

| Role | Who has it | What it allows |
| :--- | :--- | :--- |
| Raven User | Everyone who uses Raven. | Open Raven, join workspaces and channels, send messages and direct messages, and create channels. |
| Raven Admin | People who run Raven for the team. | Create workspaces. Change site-wide Raven settings such as agents, document notifications, message actions, Frappe HR, working hours and link previews. Manage which workspaces and channels a person is in. |
| System Manager | The site's administrators. A Frappe role, not a Raven role. | Add people to Raven, and disable or enable their accounts. Change the settings that need the site administrator: webhooks, recurring agent messages, document previews and the push notification keys. Change everything else a Raven Admin can, except create a workspace and sync push notification device data. |

A Raven Admin is not an admin of every workspace. To change a workspace, you need to be its admin. To change a channel, you need to be one of its admins, or a Raven Admin who is a member of it.

### Give someone a role

Only a System Manager can change a person's roles.

1. In Desk, open the person in the **User** list.
2. Open the **Roles & Permissions** tab.
3. Under **Roles**, check **Raven User**, **Raven Admin** or both.
4. Click **Save**.

If the person gets their roles from a role profile, add the **Raven User** or **Raven Admin** role profile instead. Raven creates both role profiles when it is installed.

To add many people to Raven at once, use **Settings > Users**. See [Add people to Raven](wiki:472ca3fef13e).

## Workspace admins

The person who creates a workspace is its first admin. Workspace admins change the workspace's name, description, logo and type, turn **Only admins can create channels** on or off, add and remove members, make other members admins, and delete the workspace. See [Workspace members and admins](wiki:f08fc6467550).

## Channel admins

The person who creates a channel is its first admin. Channel admins add and remove members, make other members admins, change the channel's name, description and type, and archive or delete the channel. A Raven Admin who is a member of the channel can do the same, except remove members. See [Add and remove members](wiki:57096b24fd76) and [Change, archive or delete a channel](wiki:90470c06be2a).

## Who can do what

| Task | Who can do it |
| :--- | :--- |
| Open Raven | Raven User |
| Create a workspace | Raven Admin |
| Join a public workspace | Raven User |
| Add people to a workspace | Workspace admin |
| Create a channel | Any member of the workspace, or only a workspace admin if the workspace allows only admins to create channels |
| Remove someone from a channel | Channel admin |
| Archive or delete a channel | Channel admin, or a Raven Admin who is a member |
| Add a person to Raven | System Manager |
| Disable or enable a person | System Manager |
| Manage a person's access in Settings > Users | Raven Admin or System Manager |
| Change site-wide Raven settings | Raven Admin or System Manager |
| Set up webhooks, recurring agent messages and document previews | System Manager |
| Enter the push notification keys | System Manager |

Everyone can open every tab in Settings. Without the role a tab needs, you can't change anything on it.