YouTrack Server 2026.2 Help

Permission Comparison for Default Roles

In YouTrack, permissions have different scopes to control where they apply. Global permissions apply to the entire system. Organization-scoped permissions are limited to a specific organization, while project-scoped permissions only apply to a specific project. This ensures users have access only where they need it.

Each default role provided by YouTrack is limited to a specific scope, except for the System Admin role, which is granted all permissions across all scopes.

The following tables provide a comparison of the permissions that are assigned by default to the default roles in YouTrack, grouped by permission scope.

Use this information to determine whether you can use a default role to grant access to users or groups or need to create a new role with a custom set of permissions.

Global Permission Scope

The following roles are assigned permissions with global scopes:

  • System Admin

  • Observer

  • Project Creator

  • User Manager

Entity

Permission

System Admin

Observer

Project Creator

User Manager

Application

Low-level Admin Read

Permission granted.

Low-level Admin Write

Permission granted.

Project

Create Project

Permission granted.

Permission granted.

User

Create User

Permission granted.

Permission granted.

Delete User

Permission granted.

Read User Details

Permission granted.

Permission granted.

Read User Basic

Permission granted.

Permission granted.

Update Self

Permission granted.

Permission granted.

Update User

Permission granted.

Organization

Create Organization

Permission granted.

Organization Permission Scope

By default, permissions with organization scopes are only assigned to the System Admin role. This applies to the following permissions:

  • Read Organization

  • Update Organization

  • Delete Organization

Project Permission Scope

By default, permissions with project scopes are assigned to roles that are meant to operate at the project level.

  • The Project Admin role is designed for users who manage and configure projects.

  • The Contributor role is for users who actively participate in projects by creating, editing, and managing project content.

The System Admin role is granted project scoped permissions at the global level, which means they have permission to perform project-related actions in all projects. It is also the only role that is granted Override Visibility Restrictions and Delete Project permissions by default.

Entity

Permission

System Admin

Project Admin

Contributor

Project

Read Project Basic

Permission granted.

Permission granted.

Permission granted.

Read Project Full

Permission granted.

Permission granted.

Update Project

Permission granted.

Permission granted.

Delete Project

Permission granted.

Issue

Read Issue

Permission granted.

Permission granted.

Permission granted.

Read Issue Private Fields

Permission granted.

Permission granted.

Permission granted.

Update Issue

Permission granted.

Permission granted.

Permission granted.

Create Issue

Permission granted.

Permission granted.

Permission granted.

Delete Issue

Permission granted.

Permission granted.

Permission granted.

Link Issues

Permission granted.

Permission granted.

Permission granted.

Update Issue Private Fields

Permission granted.

Permission granted.

Permission granted.

Apply Commands Silently

Permission granted.

Permission granted.

View Watchers

Permission granted.

Permission granted.

Permission granted.

Update Watchers

Permission granted.

Permission granted.

Permission granted.

View Voters

Permission granted.

Permission granted.

Permission granted.

Attachment

Add Attachment

Permission granted.

Permission granted.

Permission granted.

Update Attachment

Permission granted.

Permission granted.

Permission granted.

Delete Attachment

Permission granted.

Permission granted.

Permission granted.

Comment

Create Issue Comment

Permission granted.

Permission granted.

Permission granted.

Delete Issue Comment

Permission granted.

Permission granted.

Permission granted.

Delete Not Own and Permanent Comment Delete

Permission granted.

Permission granted.

Read Issue Comment

Permission granted.

Permission granted.

Permission granted.

Update Issue Comment

Permission granted.

Permission granted.

Permission granted.

Update Not Own Issue Comment

Permission granted.

Permission granted.

Create Article Comment

Permission granted.

Permission granted.

Permission granted.

Delete Article Comment

Permission granted.

Permission granted.

Read Article Comment

Permission granted.

Permission granted.

Permission granted.

Update Article Comment

Permission granted.

Permission granted.

Visibility

Override Visibility Restrictions

Permission granted.

Issue Work Item

Create Not Own Work Item

Permission granted.

Permission granted.

Create Work Item

Permission granted.

Permission granted.

Permission granted.

Read Work Item

Permission granted.

Permission granted.

Permission granted.

Update Not Own Work Item

Permission granted.

Permission granted.

Update Work Item

Permission granted.

Permission granted.

Permission granted.

Article

Create Article

Permission granted.

Permission granted.

Permission granted.

Delete Article

Permission granted.

Permission granted.

Read Article

Permission granted.

Permission granted.

Permission granted.

Update Article

Permission granted.

Permission granted.

23 July 2026
Default RolesCreate and Edit Roles