AppHandoff uses role-based access control to manage who can view projects, trigger scans, manage tickets, and configure settings. Roles are assigned per project, so a user can be an admin on one project and a viewer on another. The three built-in roles are Owner, Editor, and Viewer.
Owners can modify project settings, manage team members, and delete the project. Editors can trigger scans, create and update handoff tickets, and assign work. Viewers have read-only access to dashboards, scan results, and ticket history. MCP-connected agents inherit the permissions of the user whose OAuth token they authenticate with.