diff --git a/ui/src/router/modules/1application.ts b/ui/src/router/modules/1application.ts
index a412019f1..92b25035d 100644
--- a/ui/src/router/modules/1application.ts
+++ b/ui/src/router/modules/1application.ts
@@ -1,4 +1,3 @@
-import { ComplexPermission } from '@/utils/permission/type'
 
 const applicationRouter = {
   path: '/application',
diff --git a/ui/src/views/application-overview/index.vue b/ui/src/views/application-overview/index.vue
index 61f76a4ce..ee3589deb 100644
--- a/ui/src/views/application-overview/index.vue
+++ b/ui/src/views/application-overview/index.vue
@@ -54,6 +54,7 @@
                     :before-change="() => changeState(accessToken.is_active)"
                     v-hasPermission="[
                       RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
                       PermissionConst.APPLICATION_EDIT.getWorkspacePermission,
                     ]"
                   />
@@ -99,6 +100,7 @@
                     @click="openDialog"
                     v-hasPermission="[
                       RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
                       PermissionConst.APPLICATION_OVERVIEW_EMBEDDED.getWorkspacePermission,
                     ]"
                   >
@@ -110,6 +112,7 @@
                     @click="openLimitDialog"
                     v-hasPermission="[
                       RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
                       PermissionConst.APPLICATION_OVERVIEW_ACCESS.getWorkspacePermission,
                     ]"
                   >
@@ -121,6 +124,7 @@
                     @click="openDisplaySettingDialog"
                     v-hasPermission="[
                       RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
                       PermissionConst.APPLICATION_OVERVIEW_DISPLAY.getWorkspacePermission,
                     ]"
                   >
@@ -167,6 +171,7 @@
                     @click="openAPIKeyDialog"
                     v-hasPermission="[
                       RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
                       PermissionConst.APPLICATION_OVERVIEW_API_KEY.getWorkspacePermission,
                     ]"
                   >
diff --git a/ui/src/views/application/ApplicationSetting.vue b/ui/src/views/application/ApplicationSetting.vue
index 8adc5291c..0772bcc56 100644
--- a/ui/src/views/application/ApplicationSetting.vue
+++ b/ui/src/views/application/ApplicationSetting.vue
@@ -5,7 +5,9 @@
         {{ $t('common.setting') }}
       </h3>
       <el-button type="primary" @click="submit(applicationFormRef)" :disabled="loading"
-        v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.APPLICATION_OVERVIEW_PUBLIC.getWorkspacePermission]"
+        v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+        RoleConst.USER.getWorkspaceRole,
+        PermissionConst.APPLICATION_OVERVIEW_PUBLIC.getWorkspacePermission]"
       >
         {{ $t('views.application.buttons.publish') }}
       </el-button>
diff --git a/ui/src/views/application/index.vue b/ui/src/views/application/index.vue
index 7b5734ca2..3e198fd96 100644
--- a/ui/src/views/application/index.vue
+++ b/ui/src/views/application/index.vue
@@ -49,6 +49,7 @@
               class="ml-8"
               v-hasPermission="[
                 RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
                 PermissionConst.APPLICATION_EDIT.getWorkspacePermission,
               ]"
             >
@@ -236,6 +237,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.APPLICATION_EDIT.getWorkspacePermission,
                                   ],
                                   'OR',
@@ -252,6 +254,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.APPLICATION_EXPORT.getWorkspacePermission,
                                   ],
                                   'OR',
@@ -269,6 +272,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.APPLICATION_DELETE.getWorkspacePermission,
                                   ],
                                   'OR',
diff --git a/ui/src/views/chat-log/index.vue b/ui/src/views/chat-log/index.vue
index df414e8aa..994fe7d5f 100644
--- a/ui/src/views/chat-log/index.vue
+++ b/ui/src/views/chat-log/index.vue
@@ -39,17 +39,23 @@
         />
         <div style="display: flex; align-items: center" class="float-right">
           <el-button @click="dialogVisible = true"
-            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.APPLICATION_CHAT_LOG_POLICY.getWorkspacePermission]"
+            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+            RoleConst.USER.getWorkspaceRole,
+            PermissionConst.APPLICATION_CHAT_LOG_POLICY.getWorkspacePermission]"
           >
             {{$t('views.chatLog.buttons.clearStrategy')}}
           </el-button>
           <el-button @click="exportLog"
-            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.APPLICATION_CHAT_LOG_EXPORT.getWorkspacePermission]"
+            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+            RoleConst.USER.getWorkspaceRole,
+            PermissionConst.APPLICATION_CHAT_LOG_EXPORT.getWorkspacePermission]"
           >
             {{ $t('common.export') }}
           </el-button>
           <el-button @click="openDocumentDialog" :disabled="multipleSelection.length === 0"
-            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.APPLICATION_CHAT_LOG_EXPORT.getWorkspacePermission]"
+            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+            RoleConst.USER.getWorkspaceRole,
+            PermissionConst.APPLICATION_CHAT_LOG_EXPORT.getWorkspacePermission]"
           >{{ $t('views.chatLog.addToKnowledge') }}
           </el-button>
         </div>
diff --git a/ui/src/views/document/index.vue b/ui/src/views/document/index.vue
index a10cf1330..8305eb927 100644
--- a/ui/src/views/document/index.vue
+++ b/ui/src/views/document/index.vue
@@ -14,7 +14,8 @@
                 "
                 v-hasPermission="[
                   RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                  PermissionConst.KNOWLEDGE_DOCUMENT_CREATE.getWorkspacePermission,
+                  RoleConst.USER.getWorkspaceRole,
+                  PermissionConst.KNOWLEDGE_DOCUMENT_CREATE.getKnowledgeWorkspaceResourcePermission(id),
                 ]"
                 >{{ $t('views.document.uploadDocument') }}
               </el-button>
@@ -23,8 +24,8 @@
                 type="primary"
                 @click="importDoc"
                 v-hasPermission="[
-                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                  PermissionConst.KNOWLEDGE_DOCUMENT_CREATE.getWorkspacePermission,
+                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
+                  PermissionConst.KNOWLEDGE_DOCUMENT_CREATE.getKnowledgeWorkspaceResourcePermission(id),
                 ]"
                 >{{ $t('views.document.importDocument') }}
               </el-button>
@@ -43,7 +44,7 @@
                 @click="batchRefresh"
                 :disabled="multipleSelection.length === 0"
                 v-hasPermission="[
-                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                   PermissionConst.KNOWLEDGE_DOCUMENT_VECTOR.getWorkspacePermission,
                 ]"
                 >{{ $t('views.knowledge.setting.vectorization') }}
@@ -52,7 +53,7 @@
                 @click="openGenerateDialog()"
                 :disabled="multipleSelection.length === 0"
                 v-hasPermission="[
-                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                   PermissionConst.KNOWLEDGE_DOCUMENT_GENERATE.getWorkspacePermission,
                 ]"
                 >{{ $t('views.document.generateQuestion.title') }}
@@ -61,7 +62,7 @@
                 @click="openknowledgeDialog()"
                 :disabled="multipleSelection.length === 0"
                 v-hasPermission="[
-                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                  RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                   PermissionConst.KNOWLEDGE_DOCUMENT_MIGRATE.getWorkspacePermission,
                 ]"
                 >{{ $t('views.document.setting.migration') }}
@@ -77,7 +78,9 @@
                     <el-dropdown-item
                       @click="openBatchEditDocument"
                       :disabled="multipleSelection.length === 0"
-                      v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_DOCUMENT_EDIT.getWorkspacePermission],'OR')"
+                      v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
+                      PermissionConst.KNOWLEDGE_DOCUMENT_EDIT.getWorkspacePermission],'OR')"
                     >
                       {{ $t('common.setting') }}
                     </el-dropdown-item>
@@ -86,7 +89,9 @@
                       @click="syncMulDocument"
                       :disabled="multipleSelection.length === 0"
                       v-if="knowledgeDetail.type === 1 &&
-                      hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_DOCUMENT_SYNC.getWorkspacePermission],'OR')"
+                      hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
+                      PermissionConst.KNOWLEDGE_DOCUMENT_SYNC.getWorkspacePermission],'OR')"
                       >{{ $t('views.document.syncDocument') }}
                     </el-dropdown-item>
                     <el-dropdown-item
@@ -384,7 +389,7 @@
                       @click.stop="cancelTask(row, TaskType.EMBEDDING)"
                       :title="$t('views.document.setting.cancelVectorization')"
                       v-hasPermission="[
-                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                         PermissionConst.KNOWLEDGE_DOCUMENT_VECTOR.getWorkspacePermission,
                       ]"
                     >
@@ -398,7 +403,7 @@
                       @click.stop="refreshDocument(row)"
                       :title="$t('views.knowledge.setting.vectorization')"
                       v-hasPermission="[
-                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                         PermissionConst.KNOWLEDGE_DOCUMENT_VECTOR.getWorkspacePermission,
                       ]"
                     >
@@ -412,7 +417,7 @@
                       @click.stop="settingDoc(row)"
                       :title="$t('common.setting')"
                       v-hasPermission="[
-                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                         PermissionConst.KNOWLEDGE_DOCUMENT_EDIT.getWorkspacePermission,
                       ]"
                     >
@@ -425,7 +430,7 @@
                         text
                         type="primary"
                         v-hasPermission="[
-                          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                           PermissionConst.KNOWLEDGE_DOCUMENT_EDIT.getWorkspacePermission,
                         ]"
                       >
@@ -438,7 +443,9 @@
                               ([State.STARTED, State.PENDING] as Array<string>).includes(
                                 getTaskState(row.status, TaskType.GENERATE_PROBLEM),
                               )&&
-                              hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission],'OR')
+                              hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                              RoleConst.USER.getWorkspaceRole,
+                              PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission],'OR')
                             "
                             @click="cancelTask(row, TaskType.GENERATE_PROBLEM)"
                           >
@@ -446,31 +453,41 @@
                             {{ $t('views.document.setting.cancelGenerateQuestion') }}
                           </el-dropdown-item>
                           <el-dropdown-item v-else @click="openGenerateDialog(row)"
-                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission],'OR')"
+                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                            RoleConst.USER.getWorkspaceRole,
+                            PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission],'OR')"
                           >
                             <el-icon><Connection /></el-icon>
                             {{ $t('views.document.generateQuestion.title') }}
                           </el-dropdown-item>
                           <el-dropdown-item @click="openknowledgeDialog(row)"
-                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_DOCUMENT_MIGRATE.getWorkspacePermission],'OR')"
+                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                            RoleConst.USER.getWorkspaceRole,
+                            PermissionConst.KNOWLEDGE_DOCUMENT_MIGRATE.getWorkspacePermission],'OR')"
                           >
                             <AppIcon iconName="app-migrate"></AppIcon>
                             {{ $t('views.document.setting.migration') }}
                           </el-dropdown-item>
                           <el-dropdown-item @click="exportDocument(row)"
-                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_DOCUMENT_EXPORT.getWorkspacePermission],'OR')"
+                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                            RoleConst.USER.getWorkspaceRole,
+                            PermissionConst.KNOWLEDGE_DOCUMENT_EXPORT.getWorkspacePermission],'OR')"
                           >
                             <AppIcon iconName="app-export"></AppIcon>
                             {{ $t('views.document.setting.export') }} Excel
                           </el-dropdown-item>
                           <el-dropdown-item @click="exportDocumentZip(row)"
-                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_DOCUMENT_EXPORT.getWorkspacePermission],'OR')"
+                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                            RoleConst.USER.getWorkspaceRole,
+                            PermissionConst.KNOWLEDGE_DOCUMENT_EXPORT.getWorkspacePermission],'OR')"
                           >
                             <AppIcon iconName="app-export"></AppIcon>
                             {{ $t('views.document.setting.export') }} Zip
                           </el-dropdown-item>
                           <el-dropdown-item icon="Delete" @click.stop="deleteDocument(row)"
-                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_DOCUMENT_DELETE.getWorkspacePermission],'OR')"
+                            v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                            RoleConst.USER.getWorkspaceRole,
+                            PermissionConst.KNOWLEDGE_DOCUMENT_DELETE.getWorkspacePermission],'OR')"
                           >
                             {{ $t('common.delete') }}</el-dropdown-item
                           >
@@ -487,7 +504,7 @@
                       @click.stop="syncDocument(row)"
                       :title="$t('views.knowledge.setting.sync')"
                       v-hasPermission="[
-                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                         PermissionConst.KNOWLEDGE_SYNC.getWorkspacePermission,
                       ]"
                     >
@@ -506,7 +523,7 @@
                       @click.stop="cancelTask(row, TaskType.EMBEDDING)"
                       :title="$t('views.document.setting.cancelVectorization')"
                       v-hasPermission="[
-                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                         PermissionConst.KNOWLEDGE_DOCUMENT_VECTOR.getWorkspacePermission,
                       ]"
                     >
@@ -520,7 +537,7 @@
                       @click.stop="refreshDocument(row)"
                       :title="$t('views.knowledge.setting.vectorization')"
                       v-hasPermission="[
-                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                        RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                         PermissionConst.KNOWLEDGE_DOCUMENT_VECTOR.getWorkspacePermission,
                       ]"
                     >
@@ -534,7 +551,7 @@
                         text
                         type="primary"
                         v-hasPermission="[
-                          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
                           PermissionConst.KNOWLEDGE_DOCUMENT_EDIT.getWorkspacePermission,
                         ]"
                       >
@@ -591,7 +608,7 @@
         :disabled="multipleSelection.length === 0"
         @click="cancelTaskHandle(1)"
         v-hasPermission="[
-          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
           PermissionConst.KNOWLEDGE_DOCUMENT_VECTOR.getWorkspacePermission,
         ]"
       >
@@ -601,7 +618,7 @@
         :disabled="multipleSelection.length === 0"
         @click="cancelTaskHandle(2)"
         v-hasPermission="[
-          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+          RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,RoleConst.USER.getWorkspaceRole,
           PermissionConst.KNOWLEDGE_DOCUMENT_GENERATE.getWorkspacePermission,
         ]"
       >
diff --git a/ui/src/views/knowledge/index.vue b/ui/src/views/knowledge/index.vue
index 9dbd65565..b27bcd7af 100644
--- a/ui/src/views/knowledge/index.vue
+++ b/ui/src/views/knowledge/index.vue
@@ -239,7 +239,9 @@
                               icon="Refresh"
                               @click.stop="syncKnowledge(item)"
                               v-if="item.type === 1 &&
-                              hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_SYNC.getWorkspacePermission],'OR')"
+                              hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                              RoleConst.USER.getWorkspaceRole,
+                              PermissionConst.KNOWLEDGE_SYNC.getKnowledgeWorkspaceResourcePermission(item.id)],'OR')"
                               >{{ $t('views.knowledge.setting.sync') }}
                             </el-dropdown-item>
                             <el-dropdown-item
@@ -248,7 +250,8 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                                    PermissionConst.KNOWLEDGE_VECTOR.getWorkspacePermission,
+                                    RoleConst.USER.getWorkspaceRole,
+                                    PermissionConst.KNOWLEDGE_VECTOR.getKnowledgeWorkspaceResourcePermission(item.id),
                                   ],
                                   'OR',
                                 )
@@ -265,7 +268,8 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                                    PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission,
+                                    RoleConst.USER.getWorkspaceRole,
+                                    PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getKnowledgeWorkspaceResourcePermission(item.id),
                                   ],
                                   'OR',
                                 )
@@ -283,7 +287,8 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                                    PermissionConst.KNOWLEDGE_EDIT.getWorkspacePermission,
+                                    RoleConst.USER.getWorkspaceRole,
+                                    PermissionConst.KNOWLEDGE_EDIT.getKnowledgeWorkspaceResourcePermission(item.id),
                                   ],
                                   'OR',
                                 )
@@ -297,7 +302,8 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                                    PermissionConst.KNOWLEDGE_EXPORT.getWorkspacePermission,
+                                    RoleConst.USER.getWorkspaceRole,
+                                    PermissionConst.KNOWLEDGE_EXPORT.getKnowledgeWorkspaceResourcePermission(item.id),
                                   ],
                                   'OR',
                                 )
@@ -312,7 +318,8 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                                    PermissionConst.KNOWLEDGE_EXPORT.getWorkspacePermission,
+                                    RoleConst.USER.getWorkspaceRole,
+                                    PermissionConst.KNOWLEDGE_EXPORT.getKnowledgeWorkspaceResourcePermission(item.id),
                                   ],
                                   'OR',
                                 )
@@ -323,12 +330,14 @@
                             >
                             <el-dropdown-item
                               icon="Delete"
+                              type="danger"
                               @click.stop="deleteKnowledge(item)"
                               v-if="
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
-                                    PermissionConst.KNOWLEDGE_EXPORT.getWorkspacePermission,
+                                    RoleConst.USER.getWorkspaceRole,
+                                    PermissionConst.KNOWLEDGE_DELETE.getKnowledgeWorkspaceResourcePermission(item.id),
                                   ],
                                   'OR',
                                 )
diff --git a/ui/src/views/model/component/ModelCard.vue b/ui/src/views/model/component/ModelCard.vue
index 4a68ea7b7..6b1dd0e63 100644
--- a/ui/src/views/model/component/ModelCard.vue
+++ b/ui/src/views/model/component/ModelCard.vue
@@ -75,7 +75,9 @@
         <template #dropdown>
           <el-dropdown-menu>
             <el-dropdown-item
-              v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.MODEL_EDIT.getWorkspacePermission],'OR')"
+              v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+              RoleConst.USER.getWorkspaceRole,
+              PermissionConst.MODEL_EDIT.getWorkspacePermission],'OR')"
               icon="EditPen"
               :disabled="!is_permisstion"
               text
@@ -90,7 +92,9 @@
                 currentModel.model_type === 'LLM' ||
                 currentModel.model_type === 'IMAGE' ||
                 currentModel.model_type === 'TTI' ||
-                hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.MODEL_EDIT.getWorkspacePermission],'OR')
+                hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
+                PermissionConst.MODEL_EDIT.getWorkspacePermission],'OR')
               "
               :disabled="!is_permisstion"
               icon="Setting"
@@ -104,7 +108,9 @@
               :disabled="!is_permisstion"
               text
               @click.stop="deleteModel"
-              v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.MODEL_DELETE.getWorkspacePermission],'OR')"
+              v-if="hasPermission([RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+              RoleConst.USER.getWorkspaceRole,
+              PermissionConst.MODEL_DELETE.getWorkspacePermission],'OR')"
             >
               {{ $t('common.delete') }}
             </el-dropdown-item>
diff --git a/ui/src/views/model/index.vue b/ui/src/views/model/index.vue
index ab2742b95..8e8b4f8f4 100644
--- a/ui/src/views/model/index.vue
+++ b/ui/src/views/model/index.vue
@@ -56,7 +56,9 @@
             </el-select>
           </div>
           <el-button class="ml-16" type="primary" @click="openCreateModel(active_provider)"
-            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.MODEL_CREATE.getWorkspacePermission]"
+            v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+            RoleConst.USER.getWorkspaceRole,
+            PermissionConst.MODEL_CREATE.getWorkspacePermission]"
           >
             {{ $t('views.model.addModel') }}
             </el-button>
diff --git a/ui/src/views/problem/index.vue b/ui/src/views/problem/index.vue
index 05cabe54e..bc53f1cbb 100644
--- a/ui/src/views/problem/index.vue
+++ b/ui/src/views/problem/index.vue
@@ -7,15 +7,21 @@
           <div class="flex-between">
             <div>
               <el-button type="primary" @click="createProblem"
-                v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission]">
+                v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
+                PermissionConst.KNOWLEDGE_PROBLEM_CREATE.getWorkspacePermission]">
                 {{ $t('views.problem.createProblem') }}
               </el-button>
               <el-button @click="relateProblem()" :disabled="multipleSelection.length === 0"
-                v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_RELATE.getWorkspacePermission]">
+                v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
+                PermissionConst.KNOWLEDGE_PROBLEM_RELATE.getWorkspacePermission]">
                 {{ $t('views.problem.relateParagraph.title') }}
               </el-button>
               <el-button @click="deleteMulDocument" :disabled="multipleSelection.length === 0"
-                v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_DELETE.getWorkspacePermission]">
+                v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
+                PermissionConst.KNOWLEDGE_PROBLEM_DELETE.getWorkspacePermission]">
                 {{ $t('views.problem.setting.batchDelete') }}
               </el-button>
             </div>
@@ -103,7 +109,9 @@
                       placement="top"
                     >
                       <el-button type="primary" text @click.stop="relateProblem(row)"
-                      v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_RELATE.getWorkspacePermission]">
+                      v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
+                      PermissionConst.KNOWLEDGE_PROBLEM_RELATE.getWorkspacePermission]">
                         <el-icon><Connection /></el-icon>
                       </el-button>
                     </el-tooltip>
@@ -111,7 +119,9 @@
                   <span>
                     <el-tooltip effect="dark" :content="$t('common.delete')" placement="top">
                       <el-button type="primary" text @click.stop="deleteProblem(row)"
-                      v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.KNOWLEDGE_PROBLEM_DELETE.getWorkspacePermission]">
+                      v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                      RoleConst.USER.getWorkspaceRole,
+                      PermissionConst.KNOWLEDGE_PROBLEM_DELETE.getWorkspacePermission]">
                         <el-icon><Delete /></el-icon>
                       </el-button>
                     </el-tooltip>
diff --git a/ui/src/views/shared/model-shared/component/ModelCard.vue b/ui/src/views/shared/model-shared/component/ModelCard.vue
index 8e4a905f0..a8881348c 100644
--- a/ui/src/views/shared/model-shared/component/ModelCard.vue
+++ b/ui/src/views/shared/model-shared/component/ModelCard.vue
@@ -78,6 +78,7 @@
               @click.stop="openEditModel"
               v-hasPermission="[
                 RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
                 PermissionConst.MODEL_EDIT.getWorkspacePermission,
               ]"
             >
@@ -99,6 +100,7 @@
               @click.stop="openParamSetting"
               v-hasPermission="[
                 RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
                 PermissionConst.MODEL_EDIT.getWorkspacePermission,
               ]"
             >
@@ -112,6 +114,7 @@
               @click.stop="deleteModel"
               v-hasPermission="[
                 RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
                 PermissionConst.MODEL_DELETE.getWorkspacePermission,
               ]"
             >
diff --git a/ui/src/views/system-chat-user/user-manage/index.vue b/ui/src/views/system-chat-user/user-manage/index.vue
index 3039e1743..83edd64cf 100644
--- a/ui/src/views/system-chat-user/user-manage/index.vue
+++ b/ui/src/views/system-chat-user/user-manage/index.vue
@@ -14,7 +14,7 @@
         <div class="flex-between mb-16">
           <div>
             <el-button type="primary" @click="createUser()"
-              v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole],
+              v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,],
               [PermissionConst.WORKSPACE_CHAT_USER_CREATE.getWorkspacePermission],[],'OR')"
             >
               {{ t('views.userManage.createUser') }}
@@ -23,13 +23,13 @@
               {{ $t('views.chatUser.syncUsers') }}
             </el-button>
             <el-button :disabled="multipleSelection.length === 0" @click="setUserGroups"
-              v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole],
+              v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,],
                 [PermissionConst.WORKSPACE_CHAT_USER_GROUP.getWorkspacePermission],[],'OR')"
             >
               {{ $t('views.chatUser.setUserGroups') }}
             </el-button>
             <el-button :disabled="multipleSelection.length === 0" @click="handleBatchDelete"
-              v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole],
+              v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,],
                 [PermissionConst.WORKSPACE_CHAT_USER_DELETE.getWorkspacePermission],[],'OR')"
             >
               {{ $t('common.delete') }}
@@ -116,7 +116,7 @@
               <el-divider direction="vertical" />
               <span class="mr-8">
                 <el-button type="primary" text @click.stop="editUser(row)" :title="$t('common.edit')"
-                  v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole],
+                  v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,],
                     [PermissionConst.WORKSPACE_CHAT_USER_EDIT.getWorkspacePermission],[],'OR')"
                 >
                   <el-icon>
@@ -128,7 +128,7 @@
               <span class="mr-8">
                 <el-button type="primary" text @click.stop="editPwdUser(row)"
                   :title="$t('views.userManage.setting.updatePwd')"
-                  v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole],
+                  v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,],
                 [PermissionConst.WORKSPACE_CHAT_USER_EDIT.getWorkspacePermission],[],'OR')"
                   >
                   <el-icon>
@@ -139,7 +139,7 @@
               <span>
                 <el-button :disabled="row.role === 'ADMIN'" type="primary" text @click.stop="deleteUserManage(row)"
                   :title="$t('common.delete')"
-                  v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole],
+                  v-hasPermission="new ComplexPermission([RoleConst.ADMIN, RoleConst.WORKSPACE_MANAGE.getWorkspaceRole, RoleConst.USER.getWorkspaceRole,],
                 [PermissionConst.WORKSPACE_CHAT_USER_DELETE.getWorkspacePermission],[],'OR')"
                   >
                   <el-icon>
diff --git a/ui/src/views/tool/ToolFormDrawer.vue b/ui/src/views/tool/ToolFormDrawer.vue
index 76be01704..1b20f0e04 100644
--- a/ui/src/views/tool/ToolFormDrawer.vue
+++ b/ui/src/views/tool/ToolFormDrawer.vue
@@ -80,7 +80,9 @@
           {{ $t('common.param.initParam') }}
         </h4>
         <el-button link type="primary" @click="openAddInitDialog()"
-          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.TOOL_EDIT.getWorkspacePermission]"
+          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+          RoleConst.USER.getWorkspaceRole,
+          PermissionConst.TOOL_EDIT.getWorkspacePermission]"
         >
           <el-icon class="mr-4">
             <Plus/>
@@ -164,7 +166,9 @@
           </el-text>
         </h4>
         <el-button link type="primary" @click="openAddDialog()"
-          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.TOOL_EDIT.getWorkspacePermission]"
+          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+          RoleConst.USER.getWorkspaceRole,
+          PermissionConst.TOOL_EDIT.getWorkspacePermission]"
         >
           <el-icon class="mr-4">
             <Plus/>
@@ -245,10 +249,14 @@
       <div>
         <el-button :loading="loading" @click="visible = false">{{ $t('common.cancel') }}</el-button>
         <el-button :loading="loading" @click="openDebug"
-          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.TOOL_DEBUG.getWorkspacePermission]"  
+          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+          RoleConst.USER.getWorkspaceRole,
+          PermissionConst.TOOL_DEBUG.getWorkspacePermission]"  
         >{{ $t('common.debug') }}</el-button>
         <el-button type="primary" @click="submit(FormRef)" :loading="loading"
-          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,PermissionConst.TOOL_EDIT.getWorkspacePermission]"
+          v-hasPermission="[RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+          RoleConst.USER.getWorkspaceRole,
+          PermissionConst.TOOL_EDIT.getWorkspacePermission]"
         >
           {{ isEdit ? $t('common.save') : $t('common.create') }}
         </el-button
diff --git a/ui/src/views/tool/index.vue b/ui/src/views/tool/index.vue
index 690a15206..8f3588b4d 100644
--- a/ui/src/views/tool/index.vue
+++ b/ui/src/views/tool/index.vue
@@ -54,6 +54,7 @@
               class="ml-8"
               v-hasPermission="[
                 RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                RoleConst.USER.getWorkspaceRole,
                 PermissionConst.TOOL_CREATE.getWorkspacePermission,
               ]"
             >
@@ -200,6 +201,7 @@
                         class="mr-4"
                         v-hasPermission="[
                           RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                          RoleConst.USER.getWorkspaceRole,
                           PermissionConst.TOOL_EDIT.getWorkspacePermission,
                         ]"
                       />
@@ -218,6 +220,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.TOOL_EDIT.getWorkspacePermission,
                                   ],
                                   'OR',
@@ -238,6 +241,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.TOOL_EXPORT.getWorkspacePermission,
                                   ],
                                   'OR',
@@ -262,6 +266,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.TOOL_EXPORT.getWorkspacePermission,
                                   ],
                                   'OR',
@@ -278,6 +283,7 @@
                                 hasPermission(
                                   [
                                     RoleConst.WORKSPACE_MANAGE.getWorkspaceRole,
+                                    RoleConst.USER.getWorkspaceRole,
                                     PermissionConst.TOOL_DELETE.getWorkspacePermission,
                                   ],
                                   'OR',