Roles

Lens has four roles. Each role grants a different set of capabilities. Roles are assigned by Account Owners and Workspace Admins from Settings → Team.

Role summary

Role	View engagements	Work the Canvas	Sign off reports	Manage team
Consultant	Yes	Yes	Yes	No
Consultant (read-only)	Yes	No	No	No
Workspace Admin	Yes	Yes	Yes	Yes
Account Owner	Yes	Yes	Yes	Yes

Consultant

The primary role for anyone running engagements. A Consultant can:

View all engagements in the workspace
Create new engagements and new dealerships
Work through audit sections — upload documents, add notes, answer follow-up questions
Add feedback comments and resolve them
Edit recommendations on findings
Add new actions to findings
Sign off an engagement and download the final PDF
Switch between Working and Principal views
Remove and restore sections from an engagement

A Consultant cannot:

Manage team members
Change subscription plans
Access workspace-level settings

Consultant (read-only)

A read-only Consultant can view engagements and the Canvas but cannot make any changes.

This role is appropriate for:

A senior reviewer who needs to check an engagement before sign-off without risking any edits
A Dealer Principal or external reviewer who is given a workspace view for a specific engagement
A team member who is observing the process during onboarding

A Consultant (read-only) cannot:

Add notes, upload files, or answer follow-up questions
Add feedback comments or resolve them
Edit recommendations
Sign off or download a PDF
Create new engagements or dealerships

Workspace Admin

A Workspace Admin has all Consultant capabilities, plus:

Invite new team members
Assign and change roles
Deactivate team members

A Workspace Admin cannot change the subscription plan or access billing settings.

Account Owner

The Account Owner has full access to all capabilities, including:

All Workspace Admin capabilities
Subscription and billing management
Organisation-level settings

Each workspace has one Account Owner, set at workspace creation. The Account Owner cannot be removed — if the ownership needs to transfer, contact support.

A note on capability keys. Internally, each action in Lens is governed by a capability key — for example, the ability to sign off is controlled by a capability called baylens:engagement:signoff. These keys are used by the platform to enforce access control. They are listed here for completeness — if you are a Workspace Admin configuring roles and something is not working as expected, the capability key is the reference to use when contacting support.

Capability key	What it controls
`baylens:engagement:view`	View engagements and the Canvas in read-only mode
`baylens:engagement:edit`	Create engagements; add notes, uploads, and comments; edit recommendations
`baylens:engagement:signoff`	Sign off an engagement

All other role management capabilities are inherited from the workspace-level shell.