Roles Comparison
The following table provides a comparison of the predefined Roles (permission sets) in Space.
Use this information to determine whether you can use a predefined Role to grant specific permissions to members or teams, or need to edit these Roles or create a new Role with a custom set of permissions.
Default roles and permissions
System Admin role cannot be edited, create a custom role instead.
Team Admin and Team Lead roles are issued on a per-team basis, hence the permissions they contain are only valid within a particular team.
— these team-level permissions are shown in blue.Manager role permissions are only valid within a scope of members that are considered the manager's subordinates.
— these member-level permissions are shown in orange.
— black indicates global permissions (valid across all teams and members).Member role is automatically granted to all organization members and cannot be taken away. It defines permissions that are available to every member of the organization.
Members | System Admin | Team Admin | Team Lead | Manager | Member |
|---|---|---|---|---|---|
Add members (new account) |
| ||||
Update member profiles |
| ||||
Member Languages | System Admin | Team Admin | Team Lead | Manager | Member |
Update languages |
| ||||
Member Absences | System Admin | Team Admin | Team Lead | Manager | Member |
Monitor absences |
| ||||
View absences |
|
|
|
|
|
View absence reasons |
|
|
| ||
View absence approval |
|
|
| ||
Approve absences |
|
| |||
Update absences |
|
|
| ||
Manage historical absences |
| ||||
Edit vacation periods |
| ||||
Member Authentication Sessions | System Admin | Team Admin | Team Lead | Manager | Member |
Manage authentication sessions |
| ||||
Member Working Hours | System Admin | Team Admin | Team Lead | Manager | Member |
Update working hours |
| ||||
Member Consents | System Admin | Team Admin | Team Lead | Manager | Member |
View and remove application consents |
| ||||
Member Permanent Tokens | System Admin | Team Admin | Team Lead | Manager | Member |
Create permanent tokens. |
| ||||
Manage permanent tokens. |
| ||||
Two-Factor Authentication | System Admin | Team Admin | Team Lead | Manager | Member |
Set up two-factor authentication. Create application passwords. |
| ||||
Manage two-factor authentication. Manage application passwords. |
| ||||
Member Custom Fields | System Admin | Team Admin | Team Lead | Manager | Member |
View confidential custom fields |
| ||||
View restricted custom fields |
| ||||
Teams | System Admin | Team Admin | Team Lead | Manager | Member |
Add teams |
| ||||
Edit team
|
|
| |||
Positions | System Admin | Team Admin | Team Lead | Manager | Member |
Update positions |
| ||||
Articles (Blog posts) | System Admin | Team Admin | Team Lead | Manager | Member |
View articles |
|
| |||
Publish articles |
|
| |||
Unpublish articles |
| ||||
Import articles |
| ||||
Meetings | System Admin | Team Admin | Team Lead | Manager | Member |
Manage meetings |
| ||||
Channels (Chats) | System Admin | Team Admin | Team Lead | Manager | Member |
Administrate channel |
| ||||
Organization | System Admin | Team Admin | Team Lead | Manager | Member |
Update organization details |
| ||||
View usage data |
| ||||
Update overdrafts |
| ||||
Application | System Admin | Team Admin | Team Lead | Manager | Member |
View market applications |
|
| |||
View applications |
|
| |||
Delete applications |
| ||||
View applications secrets |
| ||||
Update applications |
| ||||
Create applications |
|
| |||
List commands of applications |
|
| |||
Locations | System Admin | Team Admin | Team Lead | Manager | Member |
Update locations |
| ||||
Absence Types | System Admin | Team Admin | Team Lead | Manager | Member |
View absence types |
| ||||
Manage absence types |
| ||||
Global Custom Fields | System Admin | Team Admin | Team Lead | Manager | Member |
Edit custom fields |
| ||||
Reactions | System Admin | Team Admin | Team Lead | Manager | Member |
Update reactions |
| ||||
Attachments | System Admin | Team Admin | Team Lead | Manager | Member |
Manage blocklist of link previews |
| ||||
Emojis | System Admin | Team Admin | Team Lead | Manager | Member |
Add custom emoji |
| ||||
List custom emoji |
| ||||
Manage emojis |
| ||||
Authentication Modules | System Admin | Team Admin | Team Lead | Manager | Member |
Manage authentication modules |
| ||||
Manage throttled logins |
| ||||
Permissions | System Admin | Team Admin | Team Lead | Manager | Member |
View permissions granted to other members |
| ||||
Project Permissions | |||||
Project Checklists | System Admin | Team Admin | Team Lead | Manager | Member |
Manage checklists (Create and edit project checklists) | |||||
Project Issues | System Admin | Team Admin | Team Lead | Manager | Member |
View issues | |||||
Manage issue statuses | |||||
Edit issues | |||||
Project Responsibilities | System Admin | Team Admin | Team Lead | Manager | Member |
View responsibilities | |||||
Edit responsibilities (Assign responsibilities to project members) | |||||
Restricted Projects | System Admin | Team Admin | Team Lead | Manager | Member |
List restricted projects |
| ||||
Git Repositories | System Admin | Team Admin | Team Lead | Manager | Member |
Repository access - Read repositories (View repositories source) | |||||
Repository access - Write repositories (Commit to repositories) | |||||
Repository access - Admin (Edit repository configuration) | |||||
Report external check status (For external service authorized by a member with this permission) | |||||
Package Repositories | System Admin | Team Admin | Team Lead | Manager | Member |
Repository access - Read (View repositories source) | |||||
Repository access - Create (Create new package repository) | |||||
Repository access - Write (Commit to repositories) | |||||
Repository access - Admin (Edit repository configuration) | |||||
Books (Project Documents) | System Admin | Team Admin | Team Lead | Manager | Member |
Create and attach books | |||||
View folder metadata | |||||
Post content for other members | |||||
View folder content | |||||
Edit folder content | |||||
Manage folders (Create, move, rename, delete) | |||||
Automation (Jobs) | System Admin | Team Admin | Team Lead | Manager | Member |
View | |||||
Start | |||||
Stop | |||||
Admin (Edit jobs) | |||||
Automation Workers | System Admin | Team Admin | Team Lead | Manager | Member |
View automation workers |
|
| |||
Create organization automation workers |
| ||||
Create project automation workers |
|
| |||
Manage automation workers |
| ||||
Project Parameters | System Admin | Team Admin | Team Lead | Manager | Member |
View parameters | |||||
Modify parameters | |||||
Delete parameters | |||||
Project Secrets | System Admin | Team Admin | Team Lead | Manager | Member |
View keys | |||||
Create secrets | |||||
Delete secrets | |||||
Edit secrets | |||||
Use secrets | |||||
Dev Environments | System Admin | Team Admin | Team Lead | Manager | Member |
View dev environments settings |
|
| |||
Edit dev environments settings |
| ||||
Create dev environments |
| ||||
View dev environments of all project members |
| ||||
Manage dev environments of all project members |
| ||||
Project templates and default permissions
This table shows the default permission configuration for project templates.
Project templates are pre-defined Roles that come standard with every newly created project.
System Admin can edit the templates, however the changes made globally will only be applied to projects created afterwards — existing project will not be affected.
Project Admin can always override the initial global settings, modifying them for his or her project.
Permission\Role | Project Admin | Project Member | Project Collaborator | Organization Member | Automation Service |
|---|---|---|---|---|---|
Project Checklists | |||||
Manage checklists (Create and edit project checklists) |
|
|
| ||
Project Issues | |||||
View issues |
|
|
|
| |
Manage issue statuses |
| ||||
Update issues |
|
|
| ||
Project Responsibilities | |||||
View responsibilities |
|
|
|
| |
Update responsibilities (Assign responsibilities to project members) |
| ||||
Git Repositories | |||||
Repository access - Read (View repositories source) |
|
|
|
|
|
Repository access - Write (Commit to repositories) |
|
|
| ||
Repository access - Admin (Edit repository configuration) |
| ||||
Report external status checks (For external service authorized by a member with this permission) | |||||
Package Repositories | |||||
Repository access - Read (View repositories source) |
|
|
|
|
|
Repository access - Create (Create new package repository) |
|
|
| ||
Repository access - Write (Commit to repositories) |
|
|
|
| |
Repository access - Admin (Edit repository configuration) |
| ||||
Books (Project Documents) | |||||
Create folders |
| ||||
View book metadata |
|
|
|
| |
Post content for other members | |||||
View content |
|
|
|
| |
Edit content |
|
|
| ||
Manage books (Create, move, rename, delete) |
| ||||
Automation (Jobs) | |||||
View |
|
|
|
| |
Start |
|
|
| ||
Stop |
|
|
| ||
Admin (Edit jobs) |
| ||||
Project Parameters | |||||
View parameters |
|
|
|
|
|
Update parameters |
|
|
| ||
Delete parameters |
|
|
| ||
Project Secrets | |||||
View keys of secrets |
|
|
|
|
|
Create secrets |
|
|
| ||
Delete secrets |
|
|
| ||
Edit secrets |
|
|
| ||
Use secrets |
|
| |||
Dev environments | |||||
Create dev environments |
|
| |||
View dev environments of all project members |
| ||||
Manage dev environments of all project members |
| ||||
Manage all dev environments | |||||