> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kordless.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Access levels

> What view, integration, and full access mean for a connected Account.

Every connection between your workspace and a connected Account has one of three access levels. The level is chosen when the connection is created and can be reduced or revoked later. Access determines what your workspace can do with the connected Account — it does not determine billing responsibility or ownership.

## Exact definitions

| Access level           | What your workspace can do                                                                                                                                           |
| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **View only**          | Inspect readiness, Book state, Quotes, and Settings. No writes, no API integration, no Book operations.                                                              |
| **Integration access** | Everything in View only, plus use the Account through approved API and component surfaces. No direct Book or commercial workflow operations.                         |
| **Full access**        | Everything in Integration access, plus operate the Book and approved commercial workflows. Billing, credentials, and ownership changes remain separately authorized. |

## How access levels relate

Access levels are cumulative. Each higher level includes everything the lower levels permit:

```text theme={null}
View only
  → Integration access (view + API and component surfaces)
    → Full access (integration + Book and commercial workflows)
```

A workspace with View only cannot use the API, install components, or operate the Book. A workspace with Integration access cannot publish a Book version, approve a Quote, or change Settings. A workspace with Full access can operate the Book and commercial workflows but cannot change billing, credentials, or ownership — those remain separately authorized.

## What access does not grant

<Warning>
  Access is not ownership. Access is not billing responsibility. Access is not a second workspace identity.
</Warning>

* **Access is not ownership.** The connected Account owns its Book, environments, and history. Your workspace holds a connection — it does not own the Account.
* **Access is not billing responsibility.** A workspace with Full access may or may not be the billing Account. Billing is set explicitly per connection. See [Billing responsibility](/accounts/billing-responsibility).
* **Access is not workspace switching.** A connected Account is not a second directly operated workspace. It appears in the Accounts portfolio, not in Clerk's OrganizationSwitcher. See [Create or switch workspaces](/product/getting-started/create-or-switch-workspace).
* **Access is not permanent.** A connection can be revoked at any time. Revocation removes your workspace's authority immediately. See [Revoke a connection](/accounts/revoke-a-connection).

## Rules and boundaries

* A URL or Account ID never grants access. Every request is verified against the active Clerk Organization and an active connection.
* A revoked or absent connection produces the same not-available result as a foreign or malformed Account ID. The interface never reveals whether an Account exists but is unavailable versus unreachable.
* Clerk roles do not automatically grant connected Account access. An `org:admin` in the controller workspace still needs an active connection with sufficient access level to operate a connected Account.
* A connected Account may also be independently operated through its own Clerk Organization. That adds direct access without duplicating the Account or changing its history.

## Related tasks

<CardGroup cols={2}>
  <Card title="Create an Account" icon="user-plus" href="/accounts/create-an-account">
    Create a new third-party Account and choose its access level.
  </Card>

  <Card title="Connect an existing Account" icon="link" href="/accounts/connect-an-existing-account">
    Connect an existing Account and choose its access level.
  </Card>

  <Card title="Billing responsibility" icon="credit-card" href="/accounts/billing-responsibility">
    Who pays for what when an Account is connected.
  </Card>

  <Card title="Revoke a connection" icon="x-circle" href="/accounts/revoke-a-connection">
    Safely remove access to a connected Account.
  </Card>
</CardGroup>