Rumatadocs
Browse documentation

Groups, invitations, and access controls

Understand who belongs to a group, which resources it can use, and when permission changes take effect.

Step-by-step guidance.

Before you start

  • Open the named screen in Rumata. Available controls may depend on your account, permissions, and resource state.

Groups and memberships

Open System Explorer → Permissions. A group is a set of people or workflows. Grant that group access from the specific resource’s Manage access menu.

ControlWhat it does
Groups / Invitations tabsSwitch between group membership management and invitations sent to you.
Search groupsFind a group by its name.
Collapse groups / expand groupsChange the amount of room used by the group list.
Group rowShow its members and available invitation controls. Membership details may require belonging to the group.
NewOpen the group-creation form.
Name / Description / Create groupCreate a named group, optionally explaining its purpose. Creating it does not automatically grant access to all factory resources.
Cancel / Close in New groupDismiss the creation form without submitting.
Invite by nickname / InviteSend a membership invitation to the exact Rumata nickname of an existing account. New registrations may use their email as the nickname; confirm it with the recipient. Enter also submits. Private, single-user groups disable invitations.
Add workflow / workflow search / workflow resultChoose a workflow to add as a member so it inherits the group’s access. Selecting the result applies the membership change.
Copy workflow IDCopy the identifier beside a workflow in the picker without adding it to the group.
Remove from group / Leave groupOpen confirmation to remove another member or yourself, where allowed.
Remove in confirmationRemove the membership and the access it grants. Cancel keeps it.
Reference capture from the separate Sabai Talk Thai application (September 8, 2026). Enter a recognizable team name. Creating the group and granting it access to a resource are separate steps.

Invitations addressed to you

The same invitation actions are available from the account Invitations (opens in a new tab) page and the Permissions hub.

ControlWhat it does
AcceptJoin the named group and receive the access granted to it.
DeclineReject the invitation without joining.
Pending stateTemporarily disable both actions for an invitation while your response is being processed.
This account has no pending invitations. If someone invites you, their invitation and response actions appear here.

Manage access for one resource

Open Manage access on a workflow, activity, database, bucket, or secret. Check the resource name at the top. Permission edits are staged until Save changes.

ControlWhat it does
Public rowChoose access for anyone on the internet, including people who are not signed in. Grant only the permissions intended for anonymous visitors.
All Rumata users rowChoose access for every signed-in Rumata user, beyond your own team.
Grant / permission countOpen that group’s permission choices and quick roles.
Viewer / Editor / AdminReplace the group’s draft selection with a quick role. Viewer allows reading; Editor also allows changes and deletion; Admin adds sharing and access management.
Full accessSelect every permission supported by this resource.
Public API on a workflowSelect the permissions needed to run an HTTP workflow and receive its result. Applying this to the Public row opens that capability to anonymous callers.
Individual permission checkboxAdd or remove just that capability from the draft. Available capabilities differ by resource type.
Remove all accessStage removal of that group’s permissions on this resource. It does not delete the group or its memberships.
Add a group / Search groups / group resultChoose an existing group to stage for access. Assign its permissions, then save.
Create a new group / name / description / Create & addCreate a group immediately and stage it in the resource’s access form. You still need to select Save changes to apply its permissions.
Back in the group pickerReturn from the new-group fields to the existing-group list.
Save changesApply staged group attachments and permission edits. On failure, review the error and the remaining draft before retrying.
DiscardReset the permission draft to current server values.
Done / CloseDismiss access management. Closing does not apply an unsaved permission draft.
Retry after an access-check errorCheck your management permission again. If it was revoked, the dialog displays that you cannot manage this resource.

Individual permission meanings

These are capabilities, not membership roles. A resource shows only the capabilities relevant to it.

ControlWhat it does
ReadView the resource and its available contents.
WriteCreate or modify the resource.
DeletePermanently remove the resource.
ExecuteRun a workflow, activity, or database operation where supported.
ShareShare the resource with others.
Clone / Deep cloneCopy the resource alone, or copy it together with nested resources.
Deep readRead the resource and resources nested under it.
Manage accessGrant and remove group permissions on the resource.
Build / Deploy / UndeployBuild an activity, make its deployment available to workflows, or take that deployment down.