Smartmate manages two types of permissions:
Workspace permissions allow users and groups to perform global operations on the system. They are configured through the Smartmate web interface.
Smartmate allows to define fine-grained permissions for each of the apps you define. These permissions are defined in the YAML files that define the applications. There are two types of app permissions: