# Sharing and permissions

> Decide who can see, use and manage each resource.

Source: https://usefiretower.com/docs/concepts-access

Share a pool with a company team

Company team **Engineering** Ada · Sam · Maya

↓ Editor access

Firetower directory **Engineering resources**

Worker machine Reviewer profile Review skill

The grant gives this team access to resources in this directory. Exact actions depend on the resource type.

## People, resources and directories

**Person / company team**

A person has a Firetower account. A company team groups people so access can be granted once for the group.

**Resource**

Something you can share, such as a machine, workspace, profile, skill, artifact or agent account.

**Directory**

A container for shared resources in Firetower. It is an access boundary, not a folder on a worker’s disk.

**Grant**

Access given to a person or company team, directly on a resource or through its directory.

## Access levels

| Level | Purpose |
| --- | --- |
| Viewer | Read the resource and its visible activity. |
| Editor | Use or work with the resource. On workspaces, this includes terminal access. |
| Directory Admin | Manage the directory, its contents and who can access it. |

## Ownership and sharing

Moving a resource into a directory transfers ownership to that directory. Adding a direct Viewer or Editor grant keeps the existing owner.

An organization Admin manages the installation and people. That role does not automatically expose everyone’s private resources. The person who started a session controls its messages and approvals. Colleagues with the appropriate access can start their own sessions in that workspace.

## Secrets and execution access

The vault stores credentials and secrets. Sharing a saved resource and approving an agent action are separate decisions. Agent tools run with the worker’s SSH-account access; use a separate machine or VM when work needs isolation.

Put it into practice [Share a resource](https://usefiretower.com/docs/sharing) [Check permissions](https://usefiretower.com/docs/permissions) [Manage people and teams](https://usefiretower.com/docs/people)