Share and govern a model
See who has access to a model, lock it against changes, promote it to your organization or take it back, and know who may do what.
Where: Model Library→a model's row→Permissions
A model starts on the PERSONAL tab. From its row in the Model Library you can see who holds which role on it, lock it while you work, and promote it so your whole organization can use it.
See who has access
Click Permissions (the shield) on any row. Permissions · {name} lists each role and its members:
| Role | Can |
|---|---|
| Owners | Everything: view, edit, promote, lock, delete. |
| Contributors | View and edit. |
| Viewers | View. |
| Promoters | View and promote. |
| AI agents | Recorded on the model; not yet enforced. |
Each role shows a count and its members, or — none —. Hover a member for their email.
The dialog is read-only: "Read-only — editing is not available yet." + Add stays disabled. The footer says whether the model is visible org-wide (Org-wide view) or only to the people listed (Personal only). Close it with ✕ or a click outside.
Lock a model
Lock model (the padlock) stops anyone else changing the model until it's unlocked: renaming, promoting, syncing and other edits by others are refused. Use it while you restructure a shared model.
Clicking the padlock locks the model. The Lock this model prompt then asks why, so whoever finds it locked knows: Lock saves your reason, Cancel locks it without one.
The row then shows Locked by you, and other people see Locked with your reason in the tooltip. If someone else got there first, a banner above the list says who holds the lock and who can release it; Dismiss closes it.
The padlock shows for the model's owner and for anyone with the Org Admin or Promoter role, but only the owner or an Org Admin can lock.
Unlock or force-release
Click the open padlock. If you hold the lock, its tooltip is Unlock model and it unlocks straight away.
If someone else holds it, the tooltip reads Force-release lock and the holder. eode asks first: "They lose the seat without warning." Click Force-release to take it. Only an Org Admin of the model's organization can force-release; for anyone else the lock stays.
Promote a model to your organization
Promote to Organizational (the globe) makes the model visible to every member of your organization. It moves to the ORGANIZATIONAL tab, and members can view and duplicate it.
- Click the globe on the row. Unlock the model first; while it's locked the tooltip reads Unlock the model first.
- Confirm
Promote "{name}" to organizational?with Promote. - In Promote to Organizational, work through the checklist, check the text RIA drafted, and click Promote.
| Checklist item | Passes when |
|---|---|
| Base model solved cleanly | The Base has a solved result. |
| Model is not locked | Nobody holds the lock. |
| At least one KPI defined | The model has a KPI. See KPIs. |
| AI agents picked (warn) | Optional. A warning only. |
| You have the right to promote | You're an Org Admin or a Promoter. |
RIA drafts the Description (teammates see it in search and the Library) and the Primary use case (the planning question the model answers), marked "RIA-drafted — edit before promoting". Re-draft writes them again from the model as it is now. Edit them freely; your text is saved to the model when you promote.
Reason (optional) goes on the audit trail with the promotion: "Audit captures the promote + reason."
Promote stays disabled until the four required items pass and both texts are long enough. "Soft warnings will not block promotion, but other users may ask about them."
When the model's checks are out of date
If the model's certification failed, raised concerns, or was checked on an older version, eode refuses the promotion and says why, with the remedies. You can still promote with Publish anyway, and record that I acknowledged it; the acknowledgment is stored on the audit record. Re-checking certification is on Change a model.
A model that's already organizational shows "This model is already in the Organizational library." and Already promoted. Any other refusal reads Promote failed — and the reason.
Take a model back to Personal
On an organizational row the globe reads Demote to Personal. Confirm Demote "{name}" to personal?
with Demote and it's done; there's no checklist. Organization members who aren't on the model's
roles lose sight of it.
Promotions and demotions are on the model's Audit log.
Who can do what
| Action | Who |
|---|---|
| Open, read, Duplicate | Anyone who can see the model. An organizational model can be seen by every member. |
| Rename, edit, Sync now | Owners, Contributors and Org Admins, while nobody else holds the lock. |
| Promote / Demote | Owners, the model's Promoters, and Org Admins. The globe shows only for the Org Admin and Promoter roles. |
| Lock | Owners and Org Admins. |
| Force-release | Org Admins. |
| Delete | Owners and Org Admins. |
| Permissions (view) | Everyone. |
Buttons you can't use still show on the row. Clicking one fails with {Action} failed —, the missing permission, and ask the model's owner or an org admin to grant you that action. Roles are on Roles and personas.
Limits
- Description: at least 40 characters. Primary use case: at least 20.
- Members can't be added to a model's roles in the app yet.
Related
- Model Library
- Roles and personas
- Organization: members and their roles
- Versions and history: the audit log
- Workspaces and Workflows have their own sharing