Skip to main content
Gumloop gives you fine-grained control over who can access your agents, workflows, and other resources. You can share with specific users by email, share with your entire team or organization, or make something public for anyone with the link.

How Sharing Works

Every resource in Gumloop (agents, workflows, custom nodes, interfaces) has a Share dialog that you access by clicking the Share button. The dialog has two main sections:
  1. Users: Add specific people by email and assign them a role
  2. General Access: Control broader access for your team, organization, or the public
Workflow share dialog showing user sharing and General Access settings

Roles

Roles determine what someone can do with a shared resource. Gumloop uses a four-tier role hierarchy:
Owner > Editor > Viewer > Use Only

Role Comparison

PermissionOwnerEditorViewerUse Only
View the resourceYesYesYesAgents only (chat)
Edit the resourceYesYesNoNo
Delete the resourceYesYesNoNo
Manage sharingYesYesView onlyNo
Make a copyYesYesYesNo
Leave (remove own access)NoYesYesYes

Owner

The person who created the resource. Owners have full control and cannot be removed through the sharing UI. Ownership is assigned at creation time and can only be transferred explicitly.

Editor

Full access to view, edit, delete, and manage sharing for the resource. Editors can add and remove other Editors and Viewers. This is the role team members get by default on team resources.

Viewer

Read-only access. Viewers can see the resource and its configuration, view who has access, and make a copy to their own space. They cannot edit anything.

Use Only (Agents only)

The most restricted role, available only for agents. Use Only users can chat with the agent but cannot see its configuration, instructions, tools, or any internal details. This is perfect for sharing an agent with end users who just need to interact with it.

Sharing with Specific Users

To share a resource with specific people:
  1. Open the resource and click the Share button
  2. Enter their email address in the “Add people” field
  3. Click the dropdown arrow on the Share button to choose a role
  4. Click Share
Agent share dialog showing role selection when sharing with a user
The available roles depend on the resource type:
ResourceAvailable Sharing Roles
AgentsEditor, Viewer, Use Only
WorkflowsEditor, Viewer
Custom NodesEditor, Viewer
InterfacesViewer
Chat SessionsViewer
You can share with any Gumloop user by email. They don’t need to be on your team or in your organization.

Changing a User’s Role

After sharing, you can change a user’s role from the Share dialog. Click the role label next to their name to see available options. You cannot change the Owner’s role through the sharing UI.

Removing a User

To remove someone’s access, click the role label next to their name and select Remove. Owners cannot be removed.

Leaving a Shared Resource

If you have access to a resource you no longer need, you can remove yourself by clicking your own role and selecting Leave. Owners cannot leave their own resources.

General Access

General Access controls who can access a resource without being explicitly added by email. Think of it as concentric rings, from most restrictive to most open.
Agent share dialog showing General Access options with role selection

Access Levels

LevelWho Gets AccessWhen to Use
RestrictedOnly explicitly added users and the ownerPrivate resources you control access to individually
TeamAll members of the team the resource belongs toResources that your whole team should use
OrganizationAll members of your organizationCompany-wide resources everyone should access
Anyone with linkEveryone, including people without a Gumloop accountPublic resources, demos, templates for external users
Anonymous users are capped at Viewer access. Even if you set General Access to “Anyone with link” with an Editor role, unauthenticated users will only get Viewer-level access. They must sign in to get any elevated role.

General Access Roles

When you set General Access to Team, Organization, or Anyone, you also choose what role that audience gets. For example, you might give your entire organization Viewer access to an agent, but give your team Editor access.

Rules and Constraints

Not every access level is available in every context:
Resource LocationAvailable General Access Levels
Personal spaceRestricted, Organization*, Anyone
Team spaceTeam, Organization*, Anyone
*Organization is only available if you belong to an organization. Key constraints:
  • Team resources cannot be set to Restricted. If a resource lives in a team, the minimum access level is Team. All team members will have access.
  • Personal resources cannot be set to Team. There is no team to share with.

How Access Is Resolved

When you try to access a resource, Gumloop checks your permissions in a specific order. The first match wins:
  1. Direct user grant (if you were added by email, this always wins)
  2. Team grant (if the resource has Team access and you’re a team member)
  3. Organization grant (if the resource has Organization access and you’re in the org)
  4. Public grant (if the resource has Anyone access)
  5. No access (if none of the above matched)
Direct grants always take priority. If you’re added as a Viewer directly, you’ll be a Viewer even if the Organization-level access is set to Editor. This lets resource owners restrict specific users below the general access level when needed.

Making a Copy

Viewers (and above) can make a copy of a shared resource to their own space. This creates an independent copy that they fully own.
Make a Copy button in the agent interface
For agents, the Make a Copy button appears in the top bar. For workflows, you can duplicate from the hub using the three-dot menu. Copies are completely independent. Changes to the original don’t affect the copy, and vice versa.

Sharing Agents

Agents have the richest sharing model with three roles for sharing: Editor, Viewer, and Use Only.

Agent Roles in Detail

CapabilityEditorViewerUse Only
Chat with the agentYesYesYes
View agent configurationYesYesNo
Edit instructions, tools, modelYesNoNo
Manage triggers (webhooks, schedules)YesNoNo
Create templates from the agentYesNoNo
Move agent between workspacesYesNoNo
Manage sharing settingsYesView onlyNo
Make a copyYesYesNo

Agent-Specific Share Actions

The agent Share dialog includes additional actions at the bottom:
  • Copy agent link: Copies a direct link to the agent
  • Copy current chat link: Copies a link to the current conversation
  • Copy setup link: Copies a link that guides users through authenticating with the agent’s required integrations
Use the setup link when sharing agents that rely on integrations (Gmail, Slack, etc.). It walks the recipient through connecting their own credentials so they can use the agent immediately.

Sharing Workflows

Workflows support Editor and Viewer sharing roles.
Workflow share dialog showing Editor and Viewer role options

Workflow Roles in Detail

CapabilityEditorViewer
View the workflowYesYes
Edit, add, remove nodesYesNo
Run the workflowYesNo
Manage triggersYesNo
Create templatesYesNo
Move between workspacesYesNo
Manage sharing settingsYesView only
Make a copyYesYes

Workflow vs Interface Access

Workflow access and interface access are independent. Sharing a workflow does not automatically share its interfaces, and vice versa. This lets you:
  • Share an interface widely while keeping the workflow private
  • Give someone Editor access to the workflow without giving them access to run the interface
  • Make an interface public without making the underlying workflow public
See Interfaces documentation for details on interface-specific access.

Sharing Custom Nodes

Custom nodes support Editor and Viewer roles. By default, only the creator (Owner) can edit a custom node. See Custom Node Builder for details on custom node sharing.

Sharing Chat Sessions

Individual agent chat sessions can be shared with Viewer access only. The chat creator (Owner) controls sharing. Shared viewers can read the conversation but cannot send messages.

Cross-Organization Sharing

You can share resources with users in other organizations by adding them by email. When a resource is shared across organizations:
  • The General Access section is hidden for cross-org users (to protect internal team/org details)
  • Cross-org users see a simple badge showing their access level
  • Access is governed by the direct user grant only

Enterprise Controls

Organizations on Enterprise plans have additional controls over sharing:

Public Sharing Restrictions

Organization admins can restrict users from setting General Access to “Anyone with link” using User Groups. When this restriction is enabled, the “Anyone” option is hidden in the Share dialog, and API calls to set public access will be rejected.

Audit Logging

All sharing operations are logged in the audit trail:
  • When General Access level is changed
  • When a user is granted access
  • When a user’s access is revoked
Each event records who made the change, who was affected, the role, and the resource.

Common Questions

Yes. You can share with any Gumloop user by entering their email in the Share dialog. They don’t need to be on your team or in your organization. The resource will appear in their sidebar under “Shared with me.”
If you lower the General Access level (e.g., from Organization to Restricted), users who were accessing via that level will lose access. Users with direct grants (added by email) are not affected. If you’re reducing your own access, the UI will warn you before proceeding.
No. Use Only is exclusive to agents. For workflows, the most restricted sharing role is Viewer, which gives read-only access. If you want someone to run your workflow without seeing it, share it as an interface instead.
Viewer can see the agent’s configuration (instructions, tools, model settings) and chat with it. Use Only can only chat with the agent and cannot see any configuration details. Use Only is ideal for end users who just need to interact with the agent.
Owner grants cannot be modified or removed through the sharing UI. Ownership can only be transferred explicitly by the current Owner. This protects the creator’s control over their resource.
Resources in a team inherently belong to that team, so team access is the minimum. If you need more restrictive access, move the resource to your personal space first, then share with specific users.
No. Workflow access and interface access are configured independently. Making a workflow public does not affect its interface’s access settings, and vice versa.
Anonymous (unauthenticated) users are capped at Viewer access regardless of the public grant’s role setting. They can view the resource but cannot edit, run, or manage anything. They must sign in to get elevated access.
Shared resources appear in your sidebar. For agents, check your Agents list. For workflows, check the Hub. If you still can’t find it, the sharing may not have completed. Ask the person who shared it to verify your access in the Share dialog.

Organization & Teams

Understand personal spaces, teams, and organizations

Organization Roles

Admin, Manager, and Member roles at the org level

User Groups

Enterprise feature restrictions including public sharing controls