World permissions
What owners, admins, managers, employees, restricted members and guests can do in the HyoNova office, and who can build and create worlds.
On this page
Everyone in your company enters the same office, but not everyone can do the same things there. What a person can do depends on their role. HyoNova checks these permissions on the server for every action, so hiding a button is never the only protection. This page lists the office abilities of each built-in role and of guests.
The roles#
| Role | In short |
|---|---|
| Owner | Everything, including building the office and managing guests. |
| Admin | Runs the company day to day, including the office, its addresses and guests. |
| Manager | Leads people in the office: invites guests and answers knock requests. |
| Employee | The standard member: moves, talks, meets and works in the office. |
| Restricted | Can enter and move around the office, without chat, calls or the member list. |
| Guest | A visitor with a guest link, in one office only. Not a member. |
Custom roles are not available yet. See Roles and permissions.
Office abilities by role#
| Ability | Owner | Admin | Manager | Employee | Restricted | Guest |
|---|---|---|---|---|---|---|
| Enter the company office | Yes | Yes | Yes | Yes | Yes | One office, with a link |
| Walk, enter rooms, sit, open doors, view screens | Yes | Yes | Yes | Yes | Yes | Yes |
| Set your own status, character and settings | Yes | Yes | Yes | Yes | Yes | Yes |
| See colleagues' status and location in the People sheet | Yes | Yes | Yes | Yes | — | — |
| Talk with spatial voice | Yes | Yes | Yes | Yes | — | Yes |
| Message from a nameplate | Yes | Yes | Yes | Yes | — | To members only |
| Call from a nameplate | Yes | Yes | Yes | Yes | — | — |
| Meet here in meeting rooms | Yes | Yes | Yes | Yes | — | — |
| Open company areas beside the office | By role | By role | By role | By role | By role | — |
| Create guest links | Yes | Yes | Yes | — | — | — |
| Answer knock requests | Yes | Yes | Yes | — | — | — |
| Allow or stop guests, manage everyone's guest links | Yes | Yes | — | — | — | — |
| Build office (office builder) | Yes | Yes | — | — | — | — |
| Create office worlds | Yes | Yes | — | — | — | — |
| Change office addresses | Yes | Yes | — | — | — | — |
"By role" means the company areas a person sees in the office — People, Work, Customers, Meetings, Files, Finance and Reports — follow the same permissions as the company workspace. For example, Finance appears only for roles that can read finance. See Roles and permissions.
Calls, meetings and spatial voice also need the media service HyoNova provides and are in Beta. See Communication.
Building and creating worlds#
Only owners and admins can change the office:
- Create an office world — in the Your office world step of company setup, within the number of worlds your plan allows. See Worlds and spaces.
- Open the office builder — Build office in the rail or Start build mode in search. Other roles do not see these controls.
In the instant trial there are no roles: whoever is exploring can open the builder and teleport.
Guests#
Guests enter one office through a guest link, when your company allows guests. Inside, they can walk, enter rooms, use objects, talk with spatial voice and write to their host and the members present with Messages. They cannot:
- open the company workspace or any company area,
- use the camera, share a screen or call members,
- see your company's other offices,
- open the builder.
Owners and admins turn guests on or off under Settings › Guests in office worlds. Owners, admins and managers create guest links from People. Turning guests off removes guests who are inside. See Guests and Guest links.
Changing someone's role#
Owners and admins change a member's role with Change role in the People sheet inside the office. The new role decides what they can do in the office too. Nobody can grant a role with permissions they do not hold themselves. See Roles and permissions.
Show technical details
Office permissions use these keys. Company areas use the company permission keys described on the roles page.
| Key | Allows | Roles |
|---|---|---|
world.join | Enter an office | Owner, Admin, Manager, Employee, Restricted |
world.room.enter | Enter rooms | Owner, Admin, Manager, Employee, Restricted |
world.interact | Sit, open doors, use screens | Owner, Admin, Manager, Employee, Restricted |
world.presence.read | See presence status | Owner, Admin, Manager, Employee, Restricted |
world.directory.read | Member list with status and location | Owner, Admin, Manager, Employee |
world.invite | Create guest links | Owner, Admin, Manager |
world.room.manage | Answer knock requests | Owner, Admin, Manager |
world.manage_access | Guest policy, all guest links, room access rules | Owner, Admin |
world.manage | Build and create office worlds | Owner, Admin |
Spatial voice, Message and Call additionally require communications.read, and Call requires communications.call.create; the Restricted role has neither. Guests receive world.join, world.room.enter and world.interact for the one office in their link.
Status#
| Feature | Status | Notes |
|---|---|---|
| Built-in roles | AvailableWorks today for workspaces whose plan includes it. | Owner, Admin, Manager, Employee and Restricted, enforced by the server. |
| Guest links to your office | AvailableWorks today for workspaces whose plan includes it. | Invite visitors into one office world with a link that expires, and revoke it at any time. |
| Office builder | PreviewA first, limited version you can use today. Important parts are still missing. | Draw walls and rooms, place furniture from the catalogue, and save drafts with undo, snap and grid. Builder changes are saved in your browser and are not yet shared with your team. |
Was this page helpful?
Thanks. Page ratings are not collected yet, so nothing was sent. If something is missing or wrong, see the Get help page.