Omni builds open source software for everyone
Omni Logo

Permissions

Runa uses role-based access control (RBAC) within workspaces. Each workspace member has one of three roles:

RoleDescription
OwnerFull control over the workspace. Cannot be modified or removed by others.
AdminCan manage projects, members, and settings. Cannot delete the workspace.
MemberCan create and manage their own tasks. Limited administrative access.

Permission Matrix

The table below shows what each role can do for each resource type.

ResourceCreateUpdateDeleteNotes
WorkspaceAny userAdmin+Owner onlyAny authenticated user can create a workspace
ProjectAdmin+Admin+Admin+Subject to tier limits
ColumnAdmin+Admin+Admin+Subject to tier limits
Project ColumnAdmin+Admin+Admin+Default columns for new projects
LabelAdmin+Admin+Admin+Subject to tier limits
TaskMember+Author or Admin+Author or Admin+Subject to tier limits
Task LabelMember+Author or Admin+Author or Admin+Labels on tasks
AssigneeMember+Member+Member+Subject to tier limits
Post (Comment)Member+Author or Admin+Author or Admin+Comments on tasks
Emoji (Reaction)Member+Owner or Admin+Owner or Admin+Reactions on comments
InvitationAdmin+Admin+Admin+ or InviteeInvitee can delete their own invitation
Workspace UserAdmin+Admin+Admin+Cannot modify/remove owners
User-Self onlySelf onlyCreated via OAuth, not directly
User PreferenceSelf onlySelf onlySelf onlyPersonal settings

Legend:

  • Member+ = Member, Admin, or Owner
  • Admin+ = Admin or Owner
  • Author = The user who created the resource
  • Owner = The user who owns the resource (e.g., emoji creator)

Tier Limits

Workspaces have usage limits based on their subscription tier:

ResourceFreeBasicTeam
Projects210Unlimited
Tasks (workspace-wide)5002,000Unlimited
Columns per project520Unlimited
Labels per project1050Unlimited
Assignees per task13Unlimited
Members310Unlimited
Admins13Unlimited

On this page