Access

Deployed Agents calls the three access levels Viewer, Editor, and Owner, and the API calls them viewer, deployer, and admin. admin is Owner, and a write also accepts owner for that role and editor for Editor.

Dashboard	API value	What it allows
Viewer	viewer	Open the bot
Editor	deployer	Deploy, stop, and restart
Owner	admin	Editor, plus secrets and who else has access

A new deploy gives the person who deployed it Owner and the team that owns the bot Viewer. Deploying that bot again does not change who has access. A team that already has access keeps it.

A deploy from a service account, such as CI, gives Owner to the person who created that account. The service account is not an Owner. If the account has no creating person, the team is Viewer and a team Admin can manage the bot.

A team Admin can manage every bot that team owns, including a bot the team can only view. The same person cannot manage a bot another team published, including a catalog bot installed into their team.

An Owner changes who has access in Deployed Agents.