Atmos Pro now has two read-only workspace roles:
- Viewer can follow dashboards, plans, logs, drift status, deployment history, and shared AI chats.
- Auditor can also inspect workspace and repository controls, team roles, permission configuration, and customer-visible audit records.
Both roles are unlimited and do not require a Licensed User seat. They cannot dispatch or approve workflows, pause deployments, remediate drift, invite users, edit settings, or interact with AI. Workspace feature entitlements still apply, including access to audit logs.
Assign either role from Workspace Settings → Team. The dashboard and MCP expose the same read-only role boundaries. Plans and logs can contain sensitive data, so grant visibility deliberately.
See the roles and licensing matrix for the full capability and data-visibility policy.