---
title: "Roles and permissions"
description: "What each role allows in Raíz, Agenda, Ámbar and Account, who gives them and where to see yours."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.getarbol.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and permissions

What you see and what you can do in each Arbol application depends on your role in it. This page explains each role in plain words.

## How they work

- **One role per application.** You can hold a role in Raíz, another in Agenda and none in Ámbar, for example. Without a role in an application, you don't see it.
- **What your role doesn't allow doesn't show.** If a page or a button is missing, your role doesn't include it. If you open a page your role doesn't allow, the application tells you.
- **Who gives roles.** The organization's owner gives roles in every application. Whoever holds **Administration** in an application gives that application's roles. They do it in Account, as explained in [Invite someone](/en/account/invite-someone/), or on Raíz's and Agenda's own team pages.
- **Arbol assigns the Owner role.** People who hold it show as **Protected**, and only Arbol changes their access.
- **A role change shows on your next sign-in.** If your role was changed, sign out and back in.

## Where to see your role

- In Account, under **Profile**, the **Your access** section shows your role in each application. On **Home**, each application's card shows **Your role**.
- In Agenda, your user menu at the foot of the side menu shows **Tu acceso** ("Your access") and your role.

## Raíz

In the application, Raíz is called **Contactabilidad**. Someone can hold several roles in Raíz; their permissions add up.

| Role | What it does |
| --- | --- |
| **Owner** | Full access, including the team and campaigns. Arbol assigns it. |
| **Administration** | Sets up agents, channels, tools, knowledge and the team. |
| **Agent design** | Creates and tunes agents, their knowledge and what they capture. |
| **Operations** | Handles conversations and keeps contacts up to date. |
| **Analysis** | Reviews reports, agents and contacts without changing anything. |

## Agenda

Agenda's screens are in Spanish; each role's Spanish name is in parentheses.

| Role | What it does |
| --- | --- |
| **Administration** (Administración) | Sets up services, professionals, rooms, hours, sites and the calendar's team. |
| **Front desk** (Recepción) | Books, reschedules and cancels appointments, records attendance and edits patients. |
| **Professional** (Profesional) | Sees appointments and patients from their own calendar. |
| **Viewer** (Consulta) | Sees the calendar, patients and reports without changing anything. |

## Ámbar

Ámbar is in early access. Its screens are in Spanish.

| Role | What it does |
| --- | --- |
| **Owner** | Full access to Ámbar, including restricted data and settings. Arbol assigns it. |
| **Administration** | Sets up providers, programs, cohorts, integrations and the team; approves and sends communications. |
| **Coordination** | Updates information, approves cases and sends communications; uses Arbi. |
| **Clinician** | For doctors and nurses: cases, evidence and sensitive clinical information; uses Arbi. |
| **Analysis** | Reviews and explores information and reports with Arbi, without changing anything. |
| **Audit** | Reviews information and reports, without changing anything. |

## Account

Everyone in your organization enters Account to see their applications and their profile. These roles open its administration:

| Role | What it does |
| --- | --- |
| **Administration** | Invites people to the account and manages API keys; sees billing and integrations. |
| **Billing** | Sees the balance, usage, invoices and payments, and updates the billing details. |
| **Viewer** | Sees the team, API keys, billing and integrations, without changing anything. |

Anyone with **Administration** in Raíz, Agenda or Ámbar also enters Account's administration to manage their application's team.

## Which role do I need to…

| I want to… | Role |
| --- | --- |
| Handle patient conversations | **Operations** in Raíz |
| Create or tune agents | **Agent design** or **Administration** in Raíz |
| Book, reschedule or cancel appointments | **Front desk** in Agenda |
| See my patients from my own calendar | **Professional** in Agenda |
| Set up services, hours and sites | **Administration** in Agenda |
| Invite someone to an application | **Administration** in that application |
| See the invoices | **Billing**, **Administration** or **Viewer** in Account, **Administration** in another application, or **Owner** |
| Create an API key | **Administration** in Account or in another application, or **Owner** |

To compare an application's roles permission by permission, open **Team** in Account, choose the application's tab and expand **What each role can do**.

Source: https://docs.getarbol.com/en/get-started/roles-and-permissions/index.mdx