My first steps
Create a Diggle
Question types
Present live
Invite participants
Results & Reports
Collaborate with others
AI - Diggle Buddy
Company Workspace
Account and settings
GDPR
Security
API & Integrations
FAQ & Troubleshooting
Table of Contents
Workspace Roles and Access
Workspace role values used by integrations map to Diggle’s user-facing roles.
API / SCIM value | Diggle terminology | Purpose |
|---|---|---|
admin | Admin | Manage workspace users and settings; access all workspace projects and administer project access. |
creator | Author | Create projects and content; edit content where project permissions allow. |
runner | Run only | Run permitted workspace content and access results according to the granted permissions. |
Workspace role and projects
SCIM manages the workspace role. The Workspace API manages it through upsertWorkspaceUser. Private or invite-only project grants are managed in Diggle or through the documented Workspace API projects parameter; SCIM has no projectIds extension and does not synchronize private project membership.
Shared workspace projects inherit workspace access under the applicable role rules. Private projects require a current project grant unless the user is a workspace admin. Changing the workspace role through SCIM does not replace the private project grant set. Deactivation removes project grants; later reactivation does not restore them.
Pending invitations
A pending invitation is not active workspace access. SCIM does not implicitly accept it. A runner role projected in the SCIM representation must not be treated as proof that a pending invitation was accepted.
Account boundary
Workspace administration does not authorize deletion of another person’s global Diggle account. Use workspace revocation for offboarding. Revocation removes access to the selected workspace while preserving the global account, permanent SSO identities and personal content. An explicit local block prevents SCIM or ordinary upsert from silently restoring access; an authorized admin must clear it separately.
Identity, access and licensing
Microsoft SSO establishes who is signing in. Workspace membership and role determine workspace authority; project grants determine additional private-project access. Enterprise licensing follows qualifying effective membership, not merely successful login, a pending invitation or an enabled integration. See Enterprise Access and Licensing.