kField roles comparison
What an Org Owner, an Admin member, and a Viewer member can each do in kField and kFieldCloud.
| Capability | Org Owner | Member (Admin) | Member (Viewer) (role = Member) |
|---|---|---|---|
| Organization itself | |||
| View organization details | YES | YES | YES |
| Update org settings (name, email, daily report config, timezone) | YES | YES | NO |
| Delete the organization | YES | NO | NO |
| Transfer ownership to another user | YES | NO | NO |
| Members and teams | |||
| View members of the org | YES | YES | YES |
| Add a new member | YES | YES | NO |
| Remove a member | YES | YES | NO |
| Change a member's role (Admin to Member, or back) | YES | YES | NO |
| Create or manage Teams | YES | YES | NO |
| Send invitations to new users | YES | YES | NO |
| Projects | |||
| Create new projects under this org | YES | YES | NO |
| See full list of org projects | YES (all) | YES (all) | Only projects they are a collaborator on |
| Edit project settings (rename, description, public flag) | YES | YES | NO |
| Delete a project | YES | YES | NO |
| Add or remove project collaborators | YES | YES | NO |
| Push the QGIS project from desktop (kField Sync) | YES | YES | Only if their collaborator role is Editor or higher |
| Pull project on the phone (kField mobile) | YES (any project) | YES (any project) | Only projects they are a collaborator on |
| Capture and edit features in the field | YES | YES | Only on collaborator projects, subject to collaborator role |
| Files and data | |||
| Upload or download files in any org project | YES | YES | Only files in projects they collaborate on |
| Delete files or file versions in org projects | YES | YES | NO |
| View synced edits for org projects | YES | YES | Only their own edits on their collaborator projects |
| Database credentials and API keys | |||
| Create organization-level credentials (database connections, API keys) | YES | YES | NO |
| Delete organization-level credentials | YES | YES | NO |
| Create project-level credentials | YES | YES | NO |
| Reports and notifications | |||
| Configure the daily activity report (timezone, time, recipients) | YES | YES | NO |
| Receive the daily activity report email | YES (if listed) | YES (if listed) | YES (if listed) |
| Generate an on-demand report for any past day | YES | YES | NO |
| See sync history for org projects in the admin web UI | YES | YES | NO |
| Admin web UI | |||
| Log into the kField admin web UI at all | YES (if Staff status is ticked) | YES (if Staff status is ticked) | Usually NO |
| See and manage their org via the admin web UI | YES | YES | NO |
Notes
- Org Owner vs Member (Admin): functionally near-identical. The owner can do two things an Admin member cannot: delete the organization, and transfer ownership. Everything else, both can do.
- Member (Viewer): "Member" is the only non-admin role for an organization member. The label "Viewer" reflects how it behaves in practice (can see the directory, cannot change anything). A Viewer gets NO project access by default; project access has to be granted separately by adding them as a project collaborator or by adding them to a team that has project access.
- Daily report recipients: anyone in the organization's daily-report recipient list gets the email regardless of role. Role only controls who can configure the recipient list.
- Admin web UI access is granted separately from the organization role, by ticking the Staff status checkbox on the user's profile in the admin web UI. A user can be an Admin in their organization (managing members, projects, settings via the mobile app and QGIS plugin) without being given Staff status, and vice versa. Tick Staff status only for users you want to log into the admin web UI itself.