Remote mode
Roles in the app
What viewers, operators and admins can see and do in the Mac app when they're signed in to a server.
When you're signed in to a server, the app shows your role in the server's header and hides or disables what your role can't do. The server checks every request itself, so the app's checks are a convenience, not the protection.
| In the app | viewer | operator | admin |
|---|---|---|---|
| See projects, the board and live state | ✓ | ✓ | ✓ |
| See run history | ✓ | ✓ | ✓ |
| Replay a run's transcript, follow live transcripts | ✓ | ✓ | |
| Create, move and comment on tasks | ✓ | ✓ | |
| Dispatch Now, Stop Agent, Resume Retries, Stop Waiting on Linked Tasks | ✓ | ✓ | |
| Refresh | ✓ | ✓ | |
| Read the Workflow tab | ✓ | ✓ | |
| List workspaces | ✓ | ✓ | |
| Container logs, stop containers | ✓ | ✓ | |
| Start, Stop, pause and resume projects | ✓ | ||
| Save… the workflow | ✓ | ||
| Project secrets and test logins | ✓ | ||
| Change Server Settings, run connection tests | ✓ | ||
| Build images, remove workspaces | ✓ | ||
| Add Project, Move to Server, Remove from Server… | ✓ | ||
| See Server Settings (non-secret values) and sandboxes | ✓ | ✓ | ✓ |
| See variable names | ✓ |
Admin changes to secrets, test logins, settings and app-added projects also need a fresh authenticator code. See Users, roles and codes.
When your role changes on the server, it applies on your next request; you don't need to sign in again.