---
title: "Roles and permissions"
space: "Raven"
url: "https://docs.frappe.io/raven/introduction/roles-and-permissions"
updated: "2026-10-19"
---

What you can do in Raven depends on your roles on the Frappe site, and on whether you are an admin of a workspace or a channel.

## Site roles

Site roles are set on the user in Desk. They apply to all of Raven.

| Role | Who has it | What it allows |
| :--- | :--- | :--- |
| Raven User | Everyone who uses Raven. | Open Raven, join workspaces and channels, send messages and direct messages, and create channels. |
| Raven Admin | People who run Raven for the team. | Create workspaces. Change the Raven settings for the whole site, such as agents, document notifications, message actions, Frappe HR, working hours and link previews. Manage which workspaces and channels a person is in. |
| System Manager | The site's administrators. This is a Frappe role, not a Raven role. | Add people to Raven, and disable or enable their accounts. Change the settings that need the site administrator, such as webhooks, document previews and the push notification server details. |

A System Manager can also change most of the settings a Raven Admin can. Only a Raven Admin can create a workspace.

:::note
A Raven Admin is not an admin of every workspace. To change a workspace, you need to be its admin. To change a channel, you need to be a member of it.
:::

### Give someone a role

1. In Desk, go to the **User** list and open the person.
2. Open the **Roles & Permissions** tab.
3. Under **Roles**, tick **Raven User**, **Raven Admin** or both.
4. Click **Save**.

If the person gets their roles from a role profile, add the **Raven User** or **Raven Admin** role profile to them instead. Raven creates both role profiles when it is installed.

To add many people to Raven at once, use **Settings > Users** instead. See [Add people to Raven](wiki:760412403a85).

:::note
Only a System Manager can change a person's roles.
:::

## Workspace admins

Each workspace has its own admins. The person who creates a workspace is its first admin.

A workspace admin can:

- Change the workspace's name, description, logo and type.
- Turn **Only admins can create channels** on or off.
- Add and remove members, and make other members admins.
- Delete the workspace.

See [Workspace members and admins](wiki:f08fc6467550).

## Channel admins

Each channel has its own admins. The person who creates a channel is its first admin.

A channel admin can:

- Add and remove members, and make other members admins.
- Change the channel's name, description and type.
- Archive or delete the channel.

A Raven Admin who is a member of a channel can do the same, except remove members.

See [Add and remove members](wiki:57096b24fd76) and [Change, archive or delete a channel](wiki:90470c06be2a).

## Who can do what

| Task | Who can do it |
| :--- | :--- |
| Open Raven | Raven User |
| Create a workspace | Raven Admin |
| Join a public workspace | Raven User |
| Add people to a workspace | Workspace admin |
| Create a channel | Any member of the workspace. If the workspace allows only admins to create channels, a workspace admin. |
| Remove someone from a channel | Channel admin |
| Archive or delete a channel | Channel admin, or a Raven Admin who is a member |
| Add a person to Raven | System Manager |
| Disable or enable a person | System Manager |
| Manage a person's access in Settings > Users | Raven Admin or System Manager |
| Change site-wide Raven settings | Raven Admin or System Manager |
| Set up webhooks | System Manager |

Everyone can open every tab in Settings. Without the role a tab needs, you can't change anything on it.