People, resources and directories
- Person / company team
- A person has a Firetower account. A company team groups people so access can be granted once for the group.
- Resource
- Something you can share, such as a machine, workspace, profile, skill, artifact or agent account.
- Directory
- A container for shared resources in Firetower. It is an access boundary, not a folder on a worker’s disk.
- Grant
- Access given to a person or company team, directly on a resource or through its directory.
Access levels
| Level | Purpose |
|---|---|
| Viewer | Read the resource and its visible activity. |
| Editor | Use or work with the resource. On workspaces, this includes terminal access. |
| Directory Admin | Manage the directory, its contents and who can access it. |
Ownership and sharing
Moving a resource into a directory transfers ownership to that directory. Adding a direct Viewer or Editor grant keeps the existing owner.
An organization Admin manages the installation and people. That role does not automatically expose everyone’s private resources. The person who started a session controls its messages and approvals. Colleagues with the appropriate access can start their own sessions in that workspace.
Secrets and execution access
The vault stores credentials and secrets. Sharing a saved resource and approving an agent action are separate decisions. Agent tools run with the worker’s SSH-account access; use a separate machine or VM when work needs isolation.