Roles
Roles have default privileges. Mezmo supports four roles:- Owner (
owner) - Each Mezmo Organization has one owner. The owner can’t be restricted, has the most access, and manages both admins and members. - Admin (
admin) - An Organization can have more than one admin. Admins have the second-highest level of access, can view all logs, and can’t have their access restricted. - Basic (
basic) - Standard members of your Organization (previously called “Member”). Their log access is governed by the access scopes on the roles they hold. - Read-only (
readonly) - Read-only members can view logs, run searches, view screens, and export lines. They have no permission to make changes.
Access Scopes
Access scopes are Log Analysis query strings attached to a role that limit which logs a member holding that role can see. A role can carry up to 10 access-scope queries. A role with no access scopes grants access to everything. For example, you can add an access-scope query that matches only logs from Node.js applications and attach it to a role. Members who hold that role see only Node.js logs. You manage roles and their access scopes at Settings > Organization > Roles. You can manage access scopes from the Role form and the Roles list:- In the Role form, Permissions and Access Scopes appear on separate tabs.
- A role must grant at least one permission or at least one access scope.
- In the Roles list, an Access Scopes badge marks any role that has access scopes.
- Use the Preview link to test a query against live tail (the real-time streaming view of incoming logs) before you save.
Create or Edit a Role
- Go to Settings > Organization > Roles.
- Click Create Role to add a role, or click Edit next to an existing role.
- Enter a name for the role.
- On the Permissions tab, select the privileges the role grants.
- On the Access Scopes tab, add up to 10 Log Analysis query strings to limit which logs the role can see. Leave this empty to grant access to everything.
- Click Save.

