collab.spaceDocumentation

Members & Permissions

Manage who has access to your workspace and what they can do.

The Members & Permissions settings let you control access to your workspace through role-based permissions and default access policies. Configure who can join, what roles they receive, and how permissions are applied to new content.

Members & Permissions

To access these settings, go to Settings in the sidebar, then select the Access & Permissions tab.

Default Record Permissions

Control the default visibility for newly created records:

SettingDescription
PrivateOnly the creator can access new records
TeamThe creator's team can access new records
OrganizationThe creator's organization can access new records
SpaceAll space members can access new records

These defaults apply when users create new issues, documents, files, and other records. Users can always adjust permissions on individual records.

Role Management

Built-in Roles

Your workspace includes these default roles:

RoleDescription
Space OwnerFull ownership of all records in the space. Cannot be modified.
AdministratorFull access to all features. Can manage the workspace but cannot archive or delete the space.
ContributorCan create and edit items, and manage teams.
ApproverCan view and approve items, but cannot create or edit.
View OnlyRead-only access to all items.
DisabledNo access (for suspended accounts).

The Space Owner role is locked and cannot be modified or deleted.

Permission Categories

Permissions are organized into resource categories with specific actions:

CategoryAvailable Actions
DocumentsCreate, Read, Update, Delete, Publish, Archive, Rename, Move, Duplicate, Version, Share, Comment
FilesCreate, Read, Update, Delete, Archive, Rename, Move, Duplicate, Version, Share, Comment
IssuesCreate, Read, Update, Delete, Archive, Assign, Share, Comment
MeetingsCreate, Read, Update, Delete, Archive, Share, Comment
MilestonesCreate, Read, Update, Delete, Publish, Comment
Database SchemaCreate, Read, Update, Delete, Archive, Share, Comment
Database EntryCreate, Read, Update, Delete, Archive, Comment
SpaceUpdate Settings, Invite Members, Remove Members, Manage Teams, Manage Organizations, Raise Support, Archive, Delete

Permissions follow the format resource:action (e.g., document:create, issue:update).

Custom Roles

Create custom roles for specific needs:

  1. Go to Settings > Access & Permissions
  2. Click Add Role
  3. Enter a role name and description
  4. Select the permissions to include
  5. Click Save Role

Assigning Roles

Roles can be assigned at multiple levels:

LevelDescription
SpaceDefault role for all space members
OrganizationRole for all members of an organization
TeamRole for all members of a team
IndividualRole override for specific members

Lower-level assignments override higher-level ones.

Permission Inheritance

Permissions flow through the hierarchy:

  1. Space Role - Base permissions for all members
  2. Organization Role - Override for organization members
  3. Team Role - Override for team members
  4. Individual Role - Override for specific users
  5. Record Access - Per-record permissions (Owner, Editor, Viewer)

A user's effective permissions combine their role permissions with any record-specific access.

Troubleshooting

User can't access a record

Check these in order:

  1. Is the user a space member?
  2. Does their role have the required permission?
  3. Does the record's visibility allow access?
  4. Are they explicitly added to the record's access list?

User has unexpected access

Review:

  1. Their assigned role at each level
  2. Any role overrides
  3. Record-specific access grants
  4. Team and organization memberships

Next Steps