Synth has users, groups, roles, API scopes, and project access. Keep it simple first: admins configure the system, users work inside assigned projects, API keys get narrow scopes.
Common Roles
| Role | Use |
|---|
| Admin | manage users, settings, providers, projects |
| Editor | ingest, Explore, and edit knowledge in allowed projects |
| Viewer | read knowledge, search, and browse graph data in allowed projects |
| Bot/API | scoped automation key |
API Scopes
| Scope | Use |
|---|
knowledge:read | search and read pages |
ingest:write | add sources and manage watchers |
knowledge:write | edit pages |
admin:read / admin:write | manage settings |
Good Practice
- Give AI agents project-scoped keys.
- Use
full_access only for local admin scripts.
- Separate human login from automation keys.
- Revoke old keys when rotating clients.