Roles and permissions
Frontierz includes three predefined roles, each with a fixed permission set. Custom permission profiles are not supported.
| Role | What they can do |
|---|---|
| Full Admin | Full access to every Learning Path, AI Fellow, the Connectors Library, Company Settings, Access Management, and analytics. |
| Manager | Same as a User, plus management of the specific Learning Paths and AI Fellows explicitly assigned to them. Managers can edit those Learning Paths and AI Fellows, create AI Fellows that are assigned to them, enroll users, manage access for assigned Private AI Fellows, and enable or disable built-in capabilities such as Screen Share or Schedule Next Session. The Connectors Library is restricted to Full Admins. Managers cannot manage company settings or invite Admin users. |
| User | Access to the Learning Paths they are enrolled in and the AI Fellows shared with them. They can talk to AI Fellows and edit their own profile. |

Manager permissions
When assigning the Manager role, the scope of access must be defined explicitly.
They can:
- Edit the Learning Paths and AI Fellows that have been explicitly assigned to them: content, sessions, objectives, persona, purpose, and Knowledge Base.
- Create new AI Fellows. New AI Fellows created by a Manager are assigned to that Manager.
- Enroll, remove, and export users on their assigned Learning Paths.
- Enable or disable built-in capabilities (Screen Share, Schedule Next Session) on their assigned Learning Paths and AI Fellows.
- Manage the access list for their assigned Private AI Fellows from Manage Users, including adding or removing users and exporting the access list as CSV.
- Use View as User to see the platform from a user's perspective (see below).
They cannot:
- Open the Connectors Library. The link does not appear in their sidebar or top menu, and visiting any Connectors Library URL returns an access-denied page.
- Create, edit, attach, or detach custom Connectors. If a custom Connector has already been attached to one of their AI Fellows or Learning Paths by a Full Admin, the Manager will see it as a read-only Active label. Built-in Connectors remain configurable where applicable.
- Add, edit, or remove other Admin users.
- Open Company Settings or the company profile.

View as User
Admin users have a View as User option in the bottom user menu. Enabling this option re-renders the sidebar and top menu as displayed to a User: Studio, Company Settings, and the Learning Path Admin dropdown are hidden, leaving only Home, Your Journey, and Your Fellow. The session, identity, and company context remain the same. The administration UI is hidden. Disabling the option (the button reads Back to Admin View while it is on) restores the full view.

Use View as User to verify the user experience before sending an invitation, or to assist a user during a screen-sharing support session.
Add a Full Admin or Manager
For a Manager, select the Learning Paths and AI Fellows they should be able to manage. Full Admins see everything by default, so this step can be skipped.

Full Admins can access every conversation transcript and every analytics dashboard in the organization. The Full Admin role should be assigned only to users who require this level of access.