Built-in Roles for AI-Assisted Operations

These built-in RBAC (Role-Based Access Control Role-Based Access Control) roles govern AI-assisted operations in Riverbed IQ Ops: Chat, the Skill Catalog, the Agent Catalog, the Observation Feed, and platform usage reporting. Assign them on the User Management page together with any other roles the account needs.

Role names follow the same Contributor, Reader, and Operator pattern used elsewhere on the platform. Contributor roles can create and change content. Reader roles are view-only. Operator roles can use a feature without changing its definitions.

Role	Area	Description
Usage Reader	Usage reporting	Read-only access to platform usage information.
Agent Catalog Contributor	Agent Catalog	Full management of catalog content. Create, update, and delete skills and agents in the Skill Catalog and Agent Catalog. Read built-in skills, catalog metadata, and overrides. For authoring workflows, see Creating and Editing Skills and Creating and Editing Agents.
Agent Catalog Reader	Agent Catalog	Read-only access to skills, agents, built-in skills, catalog metadata, and overrides in the Skill Catalog and Agent Catalog. Cannot create or change catalog entries.
Agent Operator	Chat	Use Chat with Riverbed Q (Q) or a published catalog agent. Create, read, update, and delete chat sessions. Send messages and reactions in Chat. Does not grant access to create or edit catalog skills or agents. See Riverbed IQ Ops Chat.
Observation Contributor	Observations	Full management of observations, artifacts, and actions surfaced through the observation manager and the Observation Feed widget. Create, read, update, and delete observations and actions. Create and delete artifacts (artifacts are immutable once created). Read observation, artifact, and action types and attributes.
Observation Reader	Observations	Read-only access to observations, artifacts, and actions in the observation manager and the Observation Feed widget. Read observation, artifact, and action types and attributes. Cannot create or change observation content.

Agent Catalog features available by role

The following table summarizes what Agent Catalog Contributor and Agent Catalog Reader can do in the Skill Catalog and Agent Catalog.

Feature	Agent Catalog Contributor	Agent Catalog Reader
View built-in skills, skills, and agents	✓	✓
View catalog metadata and overrides	✓	✓
Create, update, or delete skills	✓	❌
Create, update, or delete agents	✓	❌
Create, update, or delete catalog overrides	✓	❌

Chat features available by role

Despite its name, Agent Operator governs Chat access, not Agent Catalog authoring or runbook agent execution. It controls chat sessions and messaging on the Chat page and embedded Chat surfaces.

Feature	Agent Operator
Create, read, update, and delete Chat sessions	✓
Send Chat messages and reactions	✓
Create or edit catalog skills and agents	❌

Observation features available by role

The following table summarizes Observation Contributor and Observation Reader access to observation manager content shown in the Observation Feed widget and related surfaces. Artifacts are immutable once created: contributors can attach new artifacts or remove them, but cannot change an existing artifact in place.

Feature	Observation Contributor	Observation Reader
View observations, artifacts, and actions	✓	✓
View observation, artifact, and action types and attributes	✓	✓
Create, update, or delete observations	✓	❌
Create or delete artifacts	✓	❌
Create, update, or delete actions	✓	❌