1. Organization roles (apply across the whole organization)

2. License roles (apply per Hub application license, e.g., Drone Radar, Monitor)

One user can have more than one role at the same time (e.g., Member + Config Manager, and Viewer in Drone Radar).

How are access rights managed?

Roles are divided into 2 main sections:

Organization roles

Organization roles define what a user can do at the organization level (administration and configuration shared across apps), such as:

• inviting/removing users

• changing roles

• granting or revoking license access

• editing shared configuration (labels, whitelisting)

License roles (per Hub app)

License roles define what a user can do inside a specific Hub application (e.g., Drone Radar, Monitor), such as:

• viewing traffic and maps

• creating or editing zones

• creating or editing flight plans

License roles control in-app capabilities but do not override organization-level permissions such as ownership or Config Manager rights.

The Owner has full administrative control of the organization.

Owners can:

• Invite and remove users

• Change user roles

• Grant or revoke license access (Hub apps)

• Manage license roles (Editor / Viewer)

• View configuration pages (custom labels, whitelisting)

If an Owner also has Config Manager, they can also edit configuration content (labels and whitelisting).

Owners still need license access + a license role (Editor/Viewer) to perform actions inside Hub apps.

Member (organization role)

The Member is a standard user with no administrative permissions.

Members can:

• Use Hub apps they have access to (based on license roles)

• View configuration pages (custom labels, whitelisting)

Members cannot:

• Invite/remove users

• Change roles

• Grant/revoke license access

If a Member also has Config Manager, they can edit configuration content.

Config Manager (additive organization role)

The Config Manager role grants configuration editing rights and is additive, meaning it must be combined with either:

• Owner + Config Manager
  or

• Member + Config Manager

Config Managers can:

• View and edit custom labels

• Add, edit, or remove whitelisted aircraft
  

• Adjust the threat assessment system
  

• Perform those actions in:

  • Config Manager screen (Admin)

  • Drone Radar / Monitor

Config Managers cannot:

• Invite or remove users

• Manage organization membership

• Grant or revoke license access

Custom Labels and Whitelisting are organization-level configuration features shared across Hub products.
Editing rights for these features depend on the Config Manager role, not the license role.

License role action matrix (Drone Radar / Monitor)

Area / Action	Editor	Viewer
View maps, traffic, flight plans, zones, threats	✅	✅
Create / Edit / Delete control zones	✅	❌
Add buffered zones	✅	❌
Create / Edit / Delete manual flight plans	✅	❌