My first steps
Create a Diggle
Question types
Present live
Invite participants
Results & Reports
Collaborate with others
AI - Diggle Buddy
Company Workspace
Account and settings
GDPR
Security
API & Integrations
FAQ & Troubleshooting
Table of Contents
Workspace Roles and Access
Workspace role values used by integrations map to Diggle’s user-facing roles.
| API / SCIM value | Diggle terminology | Purpose |
|---|---|---|
| admin | Admin | Manage workspace users and settings; access all workspace projects and administer project access. |
| creator | Author | Create projects and content; edit content where project permissions allow. |
| runner | Run only | Run permitted workspace content and access results according to the granted permissions. |
Workspace role and projects
SCIM manages the workspace role. The Workspace API manages it through upsertWorkspaceUser. Private or invite-only project grants are managed in Diggle or through the documented Workspace API projects parameter; SCIM has no projectIds extension and does not synchronize private project membership.
Shared workspace projects inherit workspace access under the applicable role rules. Private projects require a current project grant unless the user is a workspace admin. Changing the workspace role through SCIM does not replace the private project grant set. Deactivation removes project grants; later reactivation does not restore them.
Pending invitations
A pending invitation is not active workspace access. SCIM does not implicitly accept it. A runner role projected in the SCIM representation must not be treated as proof that a pending invitation was accepted.
Account boundary
Workspace administration does not authorize deletion of another person’s global Diggle account. Use workspace revocation for offboarding.