New to Chains and wondering about roles and permissions? Chains works similarly to the rest of the Workiva platform, but with one important difference: permissions can be applied to a single chain, an environment, or an entire workspace. 

Chains has three unique roles that can be assigned through the Members section of the Workspace settings screen:

• Chain Owner: This legacy role grants full access to all Chains settings and objects; it's equivalent to the Workspace Owner role and supersedes all permissions. We recommend only trusted, top-level administrators be assigned this role.

• Chain Builder: The Chain Builder role allows access to the Chains homepage, but nothing else -- each team member's abilities are entirely dictated by the permissions they've been assigned. We recommend this role for most team members.

• Chain Security Admin: This role allows an administrator to assign permissions to other users. This role can be assigned to a specific environment, a workplace, or the entire organization.

Once roles are assigned, a Chain Security Admin can assign permissions to each user group in the workspace. For most team members, permissions will work hand in hand with the Chain Builder role: Chain Builder grants access to the Chains homepage, and permissions dictate what they can do once there.

In all, there are five permission levels assignable from Chains:

Who can assign these roles to users?

• The Chain Security Admin role is required to assign permissions.

• Note: Workspace owners have the same abilities as the Chain Owner role.

Another role to keep in mind, especially when exploring Connectors, is Org Security Admin. This role is necessary for connector enablement and can view, update, and manage organization security settings, such as password settings, access restrictions, SAML single sign-on, and organization activities

Check out this document for more information and FAQs about Chains permissions, or let us know your questions in a comment below!