<aside>

Last updated: 01/13/2026

</aside>

This is a detailed guide on how Aviary’s role system works and how end users can interact with the system to securely assign users permissions throughout the application.

Product Introduction

1. Knowledge base
   1. Topics
   2. Groups
      1. manager
      2. contributor
      3. view_only
   3. In order for a user to access a topic they must be added to a group that has the appropriate attachment to a topic.
   4. Note, in order for a user to see the Analytics UI or the Sources UI, they MUST have manager access to a topic.
2. Voice Agent
   1. Agents
      1. canEditAgent
      2. canEditActions
      3. canStartPauseCalls
3. Aviary Assistant
   1. Aviary Assistant access can be configured via products page.
   2. Aviary assistant is scoped to a users overall access within the Aviary system, this means if they can only use it to query products and datapoints that they have access to normally via the UI.
      1. Example: If a user does not have access to a specific topic in Knowledge Base they would never be able to ask questions about that topic or see any data for it.
      2. Example: If a user does not have access to a specific agent in Voice Agent then they would never be able to see metrics on its performance etc.

Global Administrator

Global administrators are top level admins who are able to assign access and access levels to various products.

graph TD  
  %% Node Definitions
  A(Global Admin)
  B(Product Admin)
  C(Product Admin)
  D(Product User)
  F(Product User)

  %% Subgraph for Voice Agent
  subgraph VoiceAgent ["Voice Agent"]
    B --> F
  end

  %% Subgraph for Knowledge Base
  subgraph KnowledgeBase ["Knowledge Base"]
    C --> D
  end

  %% Connections
  A --> B
  A --> C

  %% Styles and Classes
  classDef blueNode fill:#e1f5fe,stroke:#01579b,stroke-width:2px,rx:10,ry:10;
  class A,B,C blueNode;

  %% Subgraph Styling (Dotted Blue)
  style VoiceAgent fill:#f0f8ff,stroke:#0288d1,stroke-width:2px,stroke-dasharray: 5 5
  style KnowledgeBase fill:#f0f8ff,stroke:#0288d1,stroke-width:2px,stroke-dasharray: 5 5

• CAN revoke access for each product.
• CAN determine level of access a user has to a product i.e product_admin vs product_user | - CAN see all users and their access.
• CAN see the Product Access Page | - CANT see data about products if they are not already a product_admin for those products. |

NOTE:

1. Global Administrators can only be created by Aviary to limit misuse of the feature and encourage better patterns for customers.
2. Every customer should have at least one Global Administrator, however they can have as many as they need.
3. Global admins must assign themselves as product_admin or product_user before being able to interact with downstream settings.
4. Organizations can have flexibility as to how they split the administrative load; If they want one person, multiple people, IT, or business users to be Global Admins or Product admins etc.

How to assign users via Global Admin UI

using the Product Access Page to assign users.

1. Navigate to product access on the left side.

   

   If you do not see it then you might not be a global admin

2. Select the user you are trying to give access to.