Access Control

Access Control governs who can view, create, modify, publish, and operate Agents. It is designed for enterprise environments where security, isolation, and governance are mandatory.

Protean AI follows the principle of least privilege, users and systems are granted only the permissions required to perform their tasks.

Roles & Actions

Role→ Action↓	Admin	Model Admin	User	Owner	Viewer	Description
Create	Yes	Yes	Yes	NA	NA	Create a new agent.
Read	Yes	No	No	Yes	Yes	View the agent and use it in chat.
Update	Yes	No	No	Yes	No	Modify agent configuration and create revisions.
Publish	Yes	No	No	Yes	No	Publish a draft agent so it can be shared and used.
Delete	Yes	No	No	Yes	No	Remove the agent.
Manage Access	Yes	No	No	Yes	No	Grant or revoke permissions for users and groups.

Ownership & Sharing

Access to an agent is granted to users and groups in two roles:

• Owner: full control over the agent. An owner can read, update, publish, delete, and manage access, which makes the owner role the one responsible for the agent's lifecycle and for deciding who else can reach it.
• Viewer: read-only access. A viewer can view the agent and use it in chat but cannot change its configuration, so this role is how you let people consume an agent without risking accidental edits.

Owners manage sharing from the Deploy & Auth segment of the agent. Permissions can be granted to individual users or to groups, and changes take effect immediately.

note

Reading an agent includes the ability to use it in chat. Granting someone Viewer access is how you let a teammate or team consume a published agent without being able to modify it.