Permission levels
Learn how to restrict access to apps, resources, workflows, and agents.
There are three permission levels for apps, resources, workflows, and agents: Use, Edit, and Own.
Apps, Resources, and Workflows
The following permissions rules apply to apps, resources, and workflows.
| Permission | Apps | Resources | Workflows |
|---|---|---|---|
| Use | Interact with apps only. | Access only resources for queries in apps. Create and edit queries against resources in workflows. | Run workflows only. |
| Edit | Build, edit, delete, rename, release, and export apps. Create, edit, delete, and rename app folders. | Create and edit queries against resource. | Build, edit, rename, and export workflows. |
| Own | Build, edit, delete, rename, release, move, and export apps. Create, edit, delete, and rename app folders. | Create, edit, delete, rename, and move resources. Create, edit, delete, and rename resource folders. | Build, edit, delete, rename, move, and export workflows. Create, edit, delete, and rename workflow folders. |
Agents
| Agent permission | Resource permission | What you can do |
|---|---|---|
| None | Any | Cannot interact with the agent. |
| Use | None | Can chat with the agent. If a tool is called, an error is returned because the user lacks resource access. |
| Use | Use or higher | Can chat with the agent and call tools. |
| Edit | None | Can modify agent configuration, but cannot reference a resource in a tool without resource access. |
| Edit | Use or higher | Can modify agent configuration and call tools. |
| Own | None | Can modify, delete, and rename the agent, but cannot call tools without resource access. |
| Own | Use or higher | Can modify, delete, and rename the agent, and call tools. |
note
For further permissions management and settings related to Retool Agents, refer to the Manage permissions for Retool Agents page.