Roles & Permissions

Wire uses role-based access control (RBAC) to manage permissions within organizations. Each member has a role that determines what actions they can perform.

Roles Overview

Role	Description
Owner	Full control over the organization
Admin	Manage members, containers, and billing
Member	Full container management, read-only org settings

Owner

The owner has complete control over the organization.

Permissions:

• Create, read, update, and delete the organization
• Manage all members (invite, remove, change roles)
• Access billing and subscription settings
• Full container management including admin operations
• Configure organization-wide settings

Notes:

• The user who creates an organization is automatically the owner
• Organizations can have multiple owners
• There must always be at least one owner

Admin

Admins can manage team members and containers but cannot modify organization-level settings.

Permissions:

• View organization details
• Invite new members
• Remove members (except owners)
• Change member roles (except to/from owner)
• Full container management including admin operations
• Access billing settings

Cannot:

• Update organization name or settings
• Delete the organization
• Remove or demote owners

Member

Members can create and manage containers, upload files, and trigger analysis. Sensitive container operations require the admin permission.

Permissions:

• View organization details and member list
• Create containers
• Upload and delete files
• Update container name and description
• Trigger analysis
• Trash and restore containers
• Invite new members
• Use MCP tools on accessible containers
• View billing balance (read-only)

Cannot:

• Pause or unpause containers
• Change container visibility
• Change analysis cadence
• Permanently delete containers
• Migrate containers to another organization
• Change member roles
• Modify organization settings
• Purchase credits or configure billing

Container Permissions

Action	Owner	Admin	Member
Create containers	✓	✓	✓
View containers	✓	✓	✓
Upload / delete files	✓	✓	✓
Update name & description	✓	✓	✓
Trigger analysis	✓	✓	✓
Trash / restore	✓	✓	✓
Pause / unpause	✓	✓	✗
Change visibility	✓	✓	✗
Change analysis cadence	✓	✓	✗
Permanently delete	✓	✓	✗
Migrate to another org	✓	✓	✗

Admin Operations

Some container operations are considered sensitive and require the admin permission. These include pausing, changing visibility, adjusting analysis cadence, permanent deletion, and migration. Owners and Admins have the admin permission. Members do not.

Container-Level Access

Containers have two visibility settings:

• Private - All organization members can access
• Public - Anyone with the MCP URL can access (no authentication required)

Inviting Members

1. Go to Organization Settings
2. Click Members
3. Click Invite Member
4. Enter email and select role
5. Click Send Invitation

The invited user will receive an email with a link to join your organization.

Changing Roles

1. Go to Organization Settings → Members
2. Find the member
3. Click on their current role
4. Select the new role

Note

Admins can change members to Admin or Member, but cannot promote anyone to Owner or change an Owner’s role.

Removing Members

1. Go to Organization Settings → Members
2. Find the member
3. Click Remove
4. Confirm removal

Removing a member immediately revokes their access to all containers in the organization.