# Sharing and permissions

Everyone in a workspace has a role. A project or a single document can give someone more, and a read-only link shows a document to people outside the workspace for as long as you choose.

Updated on 22 October 2026.

## The five roles

- Owner: full control, including members, seats and billing.
- Admin: invites people and changes roles below owner, and edits any document. Seats and billing stay with the owner.
- Editor: edits any document and creates new ones.
- Commenter: reads every document and comments.
- Reader: reads every document and its discussions, without commenting.

Roles are checked on the server for every request, whether it comes from the app, from Studio AI or from a connected agent: an agent connected by a reader only reads.

## Invite people

1. Open Settings, then Members, and invite by email or create an invitation link.
2. Choose the role, and if you like the project the person joins straight away.
3. The invitation is valid 14 days. Pending invitations are listed and can be revoked.

The Free plan holds 2 members; on Pro and Studio, each member uses a seat, whatever their role.

## Keep a project to the people on it

On Studio and Enterprise, a project can be kept to the people added to it, each with a role there, and a member can be limited to the projects they are added to. Owners and admins set this under Settings, Per-project permissions.

**Plan:** on Free and Pro, every member reads every project of the workspace.

## Give someone more on one document

Select Share at the top of a document to see the people with access and why: their workspace role, their project role, or this document. Someone who edits through their role can let a member comment or edit on this document only.

Such a grant never lets in someone who is not a member, never lowers what a role allows, and cannot be passed on.

## Share a read-only link

1. Select Share at the top of the document, then, under Public links, choose what the link shows: This document, or With everything beneath it.
2. Choose when it expires: in 7, 30 or 90 days, or never.
3. Select Create link and send it. Anyone who has it reads without an account, and cannot comment or edit.
4. Revoke it at any time: it stops opening at once, and Undo brings the same link back for a short while.

Owners, admins and editors make links; commenters and readers cannot. A link shows only what its maker can see, and the links of a locked workspace are paused.

**Limit:** a link has no password and does not count its views: anyone who has the address can read.

## Requests for access

A member who opens a link to a document they cannot read can ask for access with a message. An owner or an admin answers it, once.

## AI agents and permissions

Studio AI and the agents connected over MCP act with the permissions of the person who asked or connected them. Share links, document access, members, roles, keys, billing and deleting a project stay human decisions: no agent can do them.

## Questions

### Can I share a document with someone outside my team?

Yes, with a read-only link: they read without an account. To let them comment or edit, invite them to the workspace, where on paid plans every member uses a seat.

### Can a share link expire?

Yes: choose 7, 30 or 90 days when you create it, or no end, and revoke it whenever you like.

### Who sees a project’s documents?

Every member reads every document of the workspace, except on Studio and Enterprise, where a project can be kept to the people added to it.

### Can an admin manage billing?

No. Admins invite people, change roles below owner and edit any document; seats and billing stay with the owner.

## Read next

- [Get started with Nodary](https://nodary.ai/docs/getting-started): Create your account, write and link your first documents, invite your team and work with AI.
- [Studio AI and Comets](https://nodary.ai/docs/studio-ai-and-comets): What the built-in assistant does, and how its use is counted in Comets.
- [The Nodary MCP server](https://nodary.ai/docs/mcp): The server, signing in, the 98 tools, safety and every client at a glance.
- [OAuth](https://nodary.ai/glossary/oauth): OAuth is a standard that lets an app act for you in another service, with access you approve, without ever seeing your password.

https://nodary.ai/docs/sharing-and-permissions