Roles

What Viewers, Editors and Owners can do on an app.

	Viewer	Editor	Owner
Open and use the app	✓	✓	✓
See who has access	✓	✓	✓
Deploy new versions and roll back		✓	✓
Read logs		✓	✓
Add, change and remove secrets		✓	✓
Query and export data		✓	✓
Edit the README		✓	✓
Fix security issues		✓	✓
Add people (Viewer or Editor)		when allowed	✓
Change someone's role			✓
Submit to the company directory		✓	✓
Set general access, unlist from the directory			✓
Rename, change the address, delete			✓
Transfer ownership			✓

An app has exactly one Owner. Admins of a company workspace can also do most Owner actions on any app, such as removing access, unlisting, transferring ownership and deleting.

By default, Editors can add people to an app as Viewer or Editor, and remove Viewers. The Owner can turn this off in the app's Settings tab under Editors can share. Then only the Owner and admins can share.

Your role in your own code

Your app can read the signed-in person's role with getUser(), for example to let viewers read but not change data.