Roles and tasks
Which roles can do each task in Qore, by module, mapped from the Roles capability matrix.
This page maps each task to the role capability it needs, and shows which of the eight standard roles have it. It also shows the Qore proficiency level needed for each role. Every check mark comes from the capability matrix on Roles. Where a task guide covers the task, the task links to it.
A person can hold several roles in one account; their capabilities add up.
Roles are held per account membership: a role in one account doesn't carry into another.
A role applies across every project in its account. Organisation Admin's tenant-level capabilities reach every account.
Roles created in your organization appear under Custom Roles in Admin › Roles and aren't shown here.
Qore roles
Viewer
Use published apps, agents, knowledge bases, and flows in a project without building anything.
Billing Manager
Viewer, plus review credit usage and set credit limits.
Approver
Viewer, plus review and approve the publishing of agents, apps, knowledge, and knowledge graphs.
Developer
Build, publish, and version apps, agents, knowledge bases, flows, and design systems in projects.
Governance Manager
Oversee knowledge, observability, evaluations, govern graphs, and resource permissions for the account.
Auditor
Inspect traces, analytics, audit logs, reports, credit usage, and controls, without changing them.
Account Admin
Administer one account: its members, teams, API keys, AI Gateway, cost controls, and governance.
Organisation Admin
Account Admin, plus three tenant-level capabilities that reach every account: create accounts, and manage the organization's brand and roles.
Custom Role
Coming Soon
How to read the role matrix: Billing Mgr means Billing Manager. Dev means Developer. Gov Mgr means Governance Manager. Acct Admin means Account Admin. Org Admin means Organisation Admin. ✓ means the role has the capability. — means it doesn't.
Console
Accounts and projects
Accounts and projects are chosen from the account and project switcher at the top of the Console sidebar.
Creating, renaming, and deleting accounts happens in Org Settings, not Console. See Organisation-wide.
Apps
Agents
Publish an agent
Publish an agent
—
—
—
✓
—
—
✓
✓
Share an agent
Share an agent
—
—
—
✓
—
—
✓
✓
Knowledge
View datasets
View data sources
✓
✓
✓
✓
✓
✓
✓
✓
Import knowledge
Import knowledge
—
—
—
✓
✓
—
✓
✓
Export knowledge
Export knowledge
—
—
—
✓
✓
—
✓
✓
Publish knowledge
Publish knowledge
—
—
—
✓
✓
—
✓
✓
Flows
Run a flow
Trigger a flow
✓
✓
✓
✓
✓
✓
✓
✓
Store, integrations, design systems, and Document AI
Browse the Store
View the store
✓
✓
✓
✓
✓
✓
✓
✓
Use integrations
Use integrations
✓
✓
✓
✓
✓
✓
✓
✓
Control Center
Observe
Cost Control
Evals
Govern
Resume agents
Resume agents
—

