Roles and permissions

Roles are cumulative. Each role includes the abilities of the roles before it.

Ability	View	Comment	Suggest	Edit	Owner
Read document	Yes	Yes	Yes	Yes	Yes
Read history and events	Yes	Yes	Yes	Yes	Yes
Listen with signed-in Node	Yes	Yes	Yes	Yes	Yes
Add and resolve comments	No	Yes	Yes	Yes	Yes
Create suggestions	No	No	Yes	Yes	Yes
Edit Markdown	No	No	No	Yes	Yes
Accept or reject suggestions	No	No	No	Yes	Yes
Upload and generate media	No	No	No	Yes	Yes
Create view through edit links	No	No	No	Yes	Yes
List and revoke all links	No	No	No	No	Yes
Publish, unpublish, or delete	No	No	No	No	Yes

Account ownership

The signed-in owner of an account document has owner access without a share key.

Narrowing access

When a request includes both an account session and a share key, the key can narrow the effective role. This is useful for testing or deliberately constraining an operation.

Sharing guidance

• Use view for public review before publication.
• Use comment for questions and decisions.
• Use suggest for agents whose changes need approval.
• Use edit for trusted integrators.
• Keep owner private.