管理与治理
See available roles
Within projects, there are three user roles: Admin, Editor, and Viewer. These roles control what the user can do in a project. A user can have different roles within different projects.
Project Admin
A Project Admin role has the highest level of permissions. Project admins can:
- Manage project settings: Change name, delete project.
- Manage project members: Invite members and remove members, change members' roles.
- View, create, update, and delete any workflows, credentials, or executions within a project.
- Create end-user credentials. By default, only project admins can create this credential type, but you can grant it to other users through custom roles.
Project Editor
A Project Editor can view, create, update, and delete any workflows, credentials, or executions within a project.
Project Viewer
A Project Viewer is effectively a read-only role with access to all workflows, credentials, and executions within a project.
Viewers aren't able to manually execute any workflows that exist in a project.
| Permission | Admin | Editor | Viewer |
|---|---|---|---|
| View workflows in the project | ✅ | ✅ | ✅ |
| View credentials in the project | ✅ | ✅ | ✅ |
| View executions | ✅ | ✅ | ✅ |
| Edit credentials and workflows | ✅ | ✅ | ❌ |
| Add workflows and credentials | ✅ | ✅ | ❌ |
| Execute workflows | ✅ | ✅ | ❌ |
| Manage members | ✅ | ❌ | ❌ |
| Modify the project | ✅ | ❌ | ❌ |
| Use external secrets in credentials | ✅\* | ✅\* | ❌ |
| Manage project secret vaults | ✅\* | ❌ | ❌ |
\* Requires Enable external secrets for project roles to be enabled by an instance owner or admin. Refer to Access for project roles. This is available from n8n version 2.13.0.
Variables and tags aren't affected by RBAC: they're global across the n8n instance.
官方原文和授权
本页来自 N8N 英文官方网站固定快照，并转换成 xueai 静态页面。内容以 N8N 持续更新的官方页面为准。