Skip to content

Understanding Permissions

Understanding Permissions

Stratos uses a role-based access control system. What you can see and do depends on the roles assigned to your account and the folders you have access to. This guide explains how it all fits together.

Every user has one or more roles. A role is a collection of permissions — specific capabilities like “create screens,” “edit layouts,” or “manage users.”

RoleDescription
ViewerRead-only access. Can view screens, schedules, and reports but cannot make changes.
EditorCan create and edit content — media, layouts, playlists, and schedules. Cannot manage users or system settings.
ManagerFull content control plus the ability to manage screens, folders, and scheduling.
OperatorCan send commands to screens, restart players, and view proofs of play. Focused on day-to-day operations.
AdministratorUnrestricted access. Can manage users, roles, system settings, and billing.

Folders are the other half of the permission model. Even if your role grants you “edit layouts,” you can only edit layouts in folders you have access to.

Folder access is set by an administrator on the Access Management page. You can be granted:

  • View access — see items in the folder but don’t modify them.
  • Edit access — create, edit, and delete items in the folder.
  • Manage access — full control including folder-level permissions.

Your effective permissions are the intersection of your roles and your folder grants:

  1. Role determines what you can do (create, edit, delete, manage).
  2. Folder grant determines where you can do it.

If you have the Editor role but only View access to the “Lobby” folder, you can edit layouts in folders where you have Edit access, but you can only view layouts in the Lobby folder.

Visit My Account at /account to review your profile and notification settings. For a full view of your role assignments, contact your administrator or check the Access Management page.

Permission changes can take up to 60 seconds to propagate. If a teammate’s access was just updated, ask them to wait a moment and reload before troubleshooting.