Roles Comparison
The following table provides a comparison of the predefined Roles (permission sets) in Space.
Use this information to determine whether you can use a predefined Role to grant specific permissions to members or teams, or need to edit these Roles or create a new Role with a custom set of permissions.
Default roles and permissions
System Admin role cannot be edited—create a custom role instead.
Team Admin and Team Lead roles are issued on a per-team basis, hence the permissions they contain are only valid within a particular team.
- these team-level permissions are shown in blue.Manager role permissions are only valid within a scope of members that are considered the manager's subordinates.
- these member-level permissions are shown in orange.
- black indicates global permissions (valid across all teams and members). Member role is automatically granted to all organization members and cannot be taken away. It defines permissions that are available to every member of the organization.
| Members | System Admin | Team Admin | Team Lead | Manager | Member |
|---|---|---|---|---|---|
| Add new member (new account) | | ||||
| Edit member profile | | ||||
| Member Languages | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit languages | | ||||
| Member Absences | System Admin | Team Admin | Team Lead | Manager | Member |
| Monitor absences | | ||||
| View absences | | | | | |
| View absence reason | | | | ||
| View absence approval | | | | ||
| Approve absences | | | |||
| Edit absences | | | | ||
| Create or edit past absences | | ||||
| Edit vacation periods | | ||||
| Member Authentication Sessions | System Admin | Team Admin | Team Lead | Manager | Member |
| View and remove authentication sessions | | ||||
| Member Working Days | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit working days | | ||||
| Member Consents | System Admin | Team Admin | Team Lead | Manager | Member |
| View and remove application consents | | ||||
| Member Permanent Tokens | System Admin | Team Admin | Team Lead | Manager | Member |
| Create permanent tokens. | | ||||
| View, update, and revoke permanent tokens. | | ||||
| Two-Factor Authentication | System Admin | Team Admin | Team Lead | Manager | Member |
| Set up two-factor authentication. Create application passwords. | | ||||
| View, activate, deactivate, and drop two-factor authentication. List and update application passwords. | | ||||
| Member Custom Fields | System Admin | Team Admin | Team Lead | Manager | Member |
| View confidential custom fields | | ||||
| View restricted custom fields | | ||||
| Teams | System Admin | Team Admin | Team Lead | Manager | Member |
| Add new team | | ||||
Edit team
| | | |||
| Positions | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit positions | | ||||
| Articles (Blog posts) | System Admin | Team Admin | Team Lead | Manager | Member |
| View articles | | | |||
| Publish articles | | | |||
| Unpublish articles | | ||||
| Import articles | | ||||
| Meetings | System Admin | Team Admin | Team Lead | Manager | Member |
| Manage meetings | | ||||
| Channels (Chats) | System Admin | Team Admin | Team Lead | Manager | Member |
| Administrate channel | | ||||
| Organization | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit organization | | ||||
| View usage data | | ||||
| Update overdrafts | | ||||
| Application | System Admin | Team Admin | Team Lead | Manager | Member |
| View market applications | | | |||
| View applications | | | |||
| Delete applications | | ||||
| View applications secrets | | ||||
| Edit applications | | ||||
| Create applications | | | |||
| List commands of applications | | | |||
| Locations | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit locations | | ||||
| Absence Types | System Admin | Team Admin | Team Lead | Manager | Member |
| View absence types | | ||||
| Edit absence types | | ||||
| Global Custom Fields | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit custom fields | | ||||
| Reactions | System Admin | Team Admin | Team Lead | Manager | Member |
| Edit reactions | | ||||
| Attachments | System Admin | Team Admin | Team Lead | Manager | Member |
| Manage blocklist of link previews | | ||||
| Emojis | System Admin | Team Admin | Team Lead | Manager | Member |
| Add custom emoji | | ||||
| View custom emoji list | | ||||
| Manage emojis | | ||||
| Authentication Modules | System Admin | Team Admin | Team Lead | Manager | Member |
| Manage authentication modules | | ||||
| Manage throttled logins | | ||||
| Permissions | System Admin | Team Admin | Team Lead | Manager | Member |
| View granted permissions | | ||||
| Project Permissions | |||||
| Project Checklists | System Admin | Team Admin | Team Lead | Manager | Member |
| Manage checklists (Create and edit project checklists) | |||||
| Project Issues | System Admin | Team Admin | Team Lead | Manager | Member |
| View issues | |||||
| Manage issue statuses | |||||
| Edit issues | |||||
| Project Responsibilities | System Admin | Team Admin | Team Lead | Manager | Member |
| View responsibilities | |||||
| Edit responsibilities (Assign responsibilities to project members) | |||||
| Private Projects | System Admin | Team Admin | Team Lead | Manager | Member |
| List private projects | | ||||
| Git Repositories | System Admin | Team Admin | Team Lead | Manager | Member |
| Repository access - Read (View repositories source) | |||||
| Repository access - Write (Commit to repositories) | |||||
| Repository access - Admin (Edit repository configuration) | |||||
| Report external check status (For external service authorized by a member with this permission) | |||||
| Package Repositories | System Admin | Team Admin | Team Lead | Manager | Member |
| Repository access - Read (View repositories source) | |||||
| Repository access - Create (Create new package repository) | |||||
| Repository access - Write (Commit to repositories) | |||||
| Repository access - Admin (Edit repository configuration) | |||||
| Books (Project Documents) | System Admin | Team Admin | Team Lead | Manager | Member |
| Create and attach books | |||||
| View book metadata | |||||
| Post content for other members | |||||
| View content | |||||
| Edit content | |||||
| Manage books (Create, move, rename, delete) | |||||
| Automation (Jobs) | System Admin | Team Admin | Team Lead | Manager | Member |
| View | |||||
| Start | |||||
| Stop | |||||
| Admin (Edit jobs) | |||||
| Project Parameters | System Admin | Team Admin | Team Lead | Manager | Member |
| View parameters | |||||
| Modify parameters | |||||
| Delete parameters | |||||
| Project Secrets | System Admin | Team Admin | Team Lead | Manager | Member |
| View keys of secrets | |||||
| Create secrets | |||||
| Delete secrets | |||||
| Edit secrets | |||||
| Use secrets | |||||
Project templates and default permissions
This table shows the default permission configuration for project templates.
Project templates are pre-defined Roles that come standard with every newly created project.
System Admin can edit the templates, however the changes made globally will only be applied to projects created afterwards — existing project will not be affected.
Project Admin can always override the initial global settings, modifying them for his or her project.
| Permission\Role | Project Admin | Project Member | Project Collaborator | Organization Member | Automation Service |
|---|---|---|---|---|---|
| Project Checklists | |||||
| Manage checklists (Create and edit project checklists) | | | | ||
| Project Issues | |||||
| View issues | | | | | |
| Manage issue statuses | | ||||
| Edit issues | | | | ||
| Project Responsibilities | |||||
| View responsibilities | | | | | |
| Edit responsibilities (Assign responsibilities to project members) | | ||||
| Git Repositories | |||||
| Repository access - Read (View repositories source) | | | | | |
| Repository access - Write (Commit to repositories) | | | | ||
| Repository access - Admin (Edit repository configuration) | | ||||
| Report external check status (For external service authorized by a member with this permission) | |||||
| Package Repositories | |||||
| Repository access - Read (View repositories source) | | | | | |
| Repository access - Create (Create new package repository) | | | | ||
| Repository access - Write (Commit to repositories) | | | | | |
| Repository access - Admin (Edit repository configuration) | | ||||
| Books (Project Documents) | |||||
| Create and attach books | | ||||
| View book metadata | | | | | |
| Post content for other members | |||||
| View content | | | | | |
| Edit content | | | | ||
| Manage books (Create, move, rename, delete) | | ||||
| Automation (Jobs) | |||||
| View | | | | | |
| Start | | | | ||
| Stop | | | | ||
| Admin (Edit jobs) | | ||||
| Project Parameters | |||||
| View parameters | | | | | |
| Modify parameters | | | | ||
| Delete parameters | | | | ||
| Project Secrets | |||||
| View keys of secrets | | | | | |
| Create secrets | | | | ||
| Delete secrets | | | | ||
| Edit secrets | | | | ||
| Use secrets | | | |||