Version: 0.9.17-patch1

Roles and access

Delphi uses a two-level role model: a system-level role on the user and a team-level role per team membership. Together they determine what each page renders and which actions succeed.

System-level roles

Every user has exactly one system role:

Role	Description
SUPERUSER	Full platform access. Bypasses team restrictions. Sees and manages all teams, users, and resources. Has admin-settings access.
SUPERVIEWER	Platform-wide read access (same visibility as Super Admin). All writes are denied. Cannot start WebRTC or telephony sessions. TelWeb shows a read-only banner.
USER	Default role. Access is scoped to the teams the user is assigned to.

Promoting or demoting SUPERUSER or SUPERVIEWER requires an email challenge. Super Admins start the change from Users and teams; Tasker sends the code when PLATFORM_ROLE_EMAIL_TASKER_READY is true — see the env var index.

Team-level roles

Within each team a user has one of three roles. A user can have different roles in different teams.

Role	Description
ADMIN	Full control within the team — settings, members, variables, header manipulation, API keys, base numbers, flow activation.
MEMBER	Creates and modifies apps, providers, agents, scenarios, endpoints; views conversation logs. Can publish apps only when the team enables Members can publish Apps. Cannot manage team settings or members.
VIEWER	Read-only. Cannot create / edit / delete / publish and cannot see conversation logs.

Permission matrix

"Team ADMIN" = SUPERUSER or ADMIN in the current team. "Tech User" = SUPERUSER, MEMBER, or ADMIN. Super Viewer matches Super Admin read cells and is No on every mutation (including publish, role changes, and session tokens).

Permission	SUPERUSER	SUPERVIEWER	Team ADMIN	MEMBER	VIEWER
View team resources	Yes	Yes	Yes	Yes	Yes
Create / edit apps, providers, agents, scenarios	Yes	No	Yes	Yes	No
Delete apps, providers, agents, scenarios	Yes	No	Yes	No	No
Create / edit endpoints	Yes	No	Yes	Yes	No
Activate / deactivate flows	Yes	No	Yes	Team setting	No
Publish apps	Yes	No	Yes	Team setting	No
View conversation logs	Yes	Yes	Yes	Yes	No
Manage team members	Yes	No	Yes	No	No
Manage team settings	Yes	No	Yes	No	No
Create / edit base numbers	Yes	No	Yes	No	No
Add extensions to endpoints	Yes	No	Yes	Yes	No
Create teams	Yes	No	No	No	No
Delete teams	Yes	No	No	No	No
Access admin-settings	Yes	Read-only	Partial (Users tab only)	No	No

Resource-level access control

The backend enforces fine-grained access control per resource. MEMBER+ means MEMBER or ADMIN in the team, or SUPERUSER. Super Viewer is included on Read / List where SUPERUSER appears, and excluded from Create / Update / Delete.

Resource	Create	Read	Update	Delete	List
User	SUPERUSER	Own / SUPERUSER	Own / SUPERUSER	SUPERUSER	SUPERUSER
Team	SUPERUSER	Team member	Team ADMIN	SUPERUSER	Authenticated
Team variables	Team ADMIN	Team member	Team ADMIN	Team ADMIN	Team member
App	Team member	Team member	MEMBER+	Team ADMIN	Filtered by team
Provider	Team member	Team member	MEMBER+	Team ADMIN	Filtered by team
Agent	Team member	Team member	MEMBER+	Team ADMIN	Filtered by team
Scenario	Team member	Team member	MEMBER+	Team ADMIN	Filtered by team
Endpoint	MEMBER+	Team member	MEMBER+	Team ADMIN	Filtered by team
Base number	SUPERUSER	Team member	SUPERUSER	SUPERUSER	Filtered by team
Server group	SUPERUSER	Team member	SUPERUSER	SUPERUSER	Team member
VoIP server	SUPERUSER	Team member	SUPERUSER	SUPERUSER	Team member
Conversation	System	Team member	System	Team ADMIN	Filtered by team

Team membership

A user can belong to multiple teams, each with a different role.
Every user has a default team that is auto-selected on login.
SUPERUSERs and SUPERVIEWERs see all teams and all resources regardless of membership. Super Viewer cannot change them.
Users cannot change their own team or platform role — another ADMIN or SUPERUSER must do it. Platform role changes use the email challenge.

Security controls

Deployments can enforce password expiry, concurrent-session limits, and login lockout rules for all roles. SUPERUSER accounts are held to the strongest password policy, including the longer minimum password length introduced in v0.9.13.

SUPERUSERs can also review platform-wide authentication and role-management events from Access logs.

Visibility summary by page

Page	VIEWER	MEMBER	ADMIN	SUPERVIEWER	SUPERUSER
Dashboard	Yes	Yes	Yes	Yes	Yes
Apps (list, detail)	Read-only	Full	Full	Read-only	Full
Providers	Read-only	Full	Full	Read-only	Full
Conversations	Hidden	Yes	Yes	Yes	Yes
Settings → Team	Yes	Yes	Yes	Read-only	Yes
Settings → Users	Hidden	Hidden	Yes	Read-only	Yes
Settings → Variables	Hidden	Hidden	Yes	Read-only	Yes
Settings → Header manipulation	Hidden	Hidden	Yes	Read-only	Yes
Settings → API keys	Hidden	Hidden	Yes (if enabled)	Read-only	Yes
Admin settings	Hidden	Hidden	Users tab only	Read-only	Full

System-level roles​

Team-level roles​

Permission matrix​

Resource-level access control​

Team membership​

Security controls​

Visibility summary by page​

See also​