Manage Access to a Project
When you create a project you become the project's administrator, and it's up to you who will have access to that project and at what level.
Access to a project is provided on the membership basis, by adding a person to the project and assigning them a Role that has a predefined set of permissions.
Each project comes with the following predefined Roles:
Project Admin — intended for project participants that should be allowed to manage access and configure project modules as well as contribute to the project.
Project Member — intended for project participants that contribute to the project on regular basis and are included in the Project Team.
External Collaborators — defines a limited set of permissions that can be enabled for users registered in the organization as Collaborators and added to the project. Permissions from this set can be enabled for each External Collaborator individually and will be only valid within this project.
Guests — defines a limited set of permissions that can be enabled for users registered in the organization as Guests and added to the project. Permissions from this set can be enabled for each Guest individually and will be only valid within this project.
Organization Member — defines what permissions the rest of Space users have in the project.
Automation Service — intended for automation services that access the project repositories.
These predefined Roles are pre-configured to allow only Project Members and Project Administrators to contribute to the project, access its internal features, and modify data. However, you can edit these Roles or create a new custom one with a different variety of project access permissions. (Custom Roles available starting with Organization plan.)
Add people to the project
On the project sidebar menu, choose People.
Click Add participants and choose a person or team from the drop-down list:
Choose what role the participant should have in the project:
You can't choose a different role for an External user (Collaborator or Guest), but you can grant such users additional project permissions on an individual basis.
When you're done adding participants, click Save.
All project participants are listed on the page. The filters above the list show the roles used in the projects and the number of participants in each role:
Click on a filter to see only participants with the respective role. Click again to disable the filter and see the full list.
Revoke project access rights
You can revoke access permissions provided by any role by removing a participant from the list on the People page.
On the project sidebar menu, choose People.
Find a person or team you want to remove using the Search by name field, or click on a corresponding role on top of the list to filter it.
Delete a participant from the list:
Configure project permissions
If you find the default permission arrangement unsatisfactory, you can edit the Roles by adding or removing certain permissions from them. You can also create a new custom Role with a different permission set. (Custom Roles available starting with Organization plan.)
See what permissions are included with the default Roles in the Roles comparison table.
To edit Roles
On the project sidebar menu, choose Settings.
On the Project Settings page, go to the Access tab.
The Access page will be displayed.
On the left pane, choose the Role that you want to edit and click Edit permissions:
Enable or disable permissions for the selected Role. Make sure you scroll down the list to view all available permissions:
Click Save when done.
Custom Roles in a project
You can create a new Role with a custom set of permission and assign it to project participants by adding them to the Role.
To create a custom Role
On the project sidebar menu, choose Settings.
On the Project Settings page, go to the Access tab.
The Access page will be displayed.
Click New Role:
The new Role will be listed on the left pane under Custom Roles:
Optionally, edit the new role's name. Instead of a generic "custom role" you can give it a more descriptive name depending on the permission set you're going to grant it, e.g. "Privileged Member".
Click Edit permissions and select the permissions that you want included in this Role. Make sure you scroll down the list to view all available permissions::
Click Save when done.
To assign a custom Role to participants
On the project sidebar menu, choose People.
To assign the custom role to a new participant, first add the participant to the project.
Locate the participant on the list then choose the custom role from the drop-down menu:
External users in a project
External user is a person who registered in your Space organization either as Guest or Collaborator. External users are not considered organization members and therefore have limited access rights. To allow External users to participate in your project, you should add them to the project and explicitly grant them permissions you consider necessary.
The default access only gives External users (both Collaborators and Guests) basic viewing rights within the project. If you want an External user to collaborate on the project and have access to certain project resources, you can provide them with extra permissions. You cannot assign them (add them to) another role nor modify the Collaborator or Guest roles. Additional permissions can be granted to individual External users on one-by-one basis. Keep in mind that Collaborators can be granted a much wider scope of permissions than Guests. While a Collaborator can be provided access to all non-administrative project features and functionality, the permissions available to a Guest are limited to Documents, Issues, and Issue boards.
Add an External user to the project
On the project sidebar menu, choose People.
Click Add participants and choose the person you want to add from the drop-down list:
Click Save.
The external user will be added to your project and granted the default permissions. You can grant that user additional permissions from the selection limited by the user's role (Collaborator or Guest).
Edit permissions for an External user
On the project sidebar menu, choose People.
Locate the External user which permissions you want to edit (grant or revoke) and click
Guest
orExternal collaborator
next to that user.Scroll down the list to see all permissions. Add or remove permissions using checkboxes.
Click Save when done.
Default project roles comparison
The table below lists the default permissions for each Role.
— available and enabled by default
— available but disabled by default
No checkbox — not available and cannot be enabled
Project (General)
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View project details | ||||||
Manage project permission scheme | ||||||
Manage project sidebar pins |
Git Repositories
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
Read Git repositories (View repositories source) | ||||||
Write Git repositories (Commit to repositories) | ||||||
Manage Git repositories (Edit repository configuration) | ||||||
Report external status checks (For external service authorized by a member with this permission) |
Project Responsibilities
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View responsibilities | ||||||
Update responsibilities (Assign responsibilities to project members) |
Automation (Jobs)
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View automation jobs | ||||||
Start automation jobs | ||||||
Stop automation jobs | ||||||
Manage automation jobs |
Project Secrets
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View keys of project secrets | ||||||
Create project secrets | ||||||
Delete project secrets | ||||||
Update project secrets | ||||||
Use project secrets |
Project Parameters
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View project parameters | ||||||
Modify project parameters | ||||||
Delete project parameters |
Code Review
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View code reviews | ||||||
Create code reviews | ||||||
Edit code reviews | ||||||
Create suggested edit | ||||||
Moderate suggestions |
Code Review Comments
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View code review comments | ||||||
Post comments to code reviews | ||||||
View code review channel participants | ||||||
Add reactions to comments in code reviews | ||||||
View reactions to comments in code reviews | ||||||
Add participants to code review discussions and threads |
Project Issues
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View issues | ||||||
Manage issue settings | ||||||
Update issues | ||||||
Import issues | ||||||
Restore issues | ||||||
Create issues | ||||||
Move issues | ||||||
Manage tags | ||||||
View spent time | ||||||
Manage own spent time | ||||||
Manage any spent time |
Issue Comments
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
Post comments to issues | ||||||
Add reactions to issue comments | ||||||
View reactions to issue comments | ||||||
Pin or unpin issue comments | ||||||
View participants in issue comment threads | ||||||
Add participants to issue comment threads |
Project Boards
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
Create boards | ||||||
Manage boards | ||||||
Manage issue assignment | ||||||
View boards |
Package Repositories
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
Create package repositories (Create new package repository) | ||||||
Read package repositories (View repositories source) | ||||||
Write package repositories (Commit to repositories) | ||||||
Admin package repositories (Edit repository configuration) |
Project Documents
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
Create folders | ||||||
Create documents | ||||||
View folder metadata | ||||||
View documents | ||||||
Edit documents | ||||||
Manage documents (move, rename) | ||||||
Archive documents | ||||||
Delete documents forever |
Vault Connections
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View Vault connections | ||||||
Modify Vault connections | ||||||
Delete Vault connections |
Project Deployments
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
View deployments | ||||||
Modify deployment targets | ||||||
Modify deployments |
Dev environments
Permission\Role | Project Admin | Project Member | Organization Member | Collaborator (External) | Guest (External) | Automation Service |
---|---|---|---|---|---|---|
Create dev environments | ||||||
View dev environments of all project members | ||||||
Manage dev environments of all project members | ||||||
Join dev environments from hot pool | ||||||
Manage warm-up automatic triggers |