Users & Access
Every user in your workspace has up to four independent settings that control access. They are independent because they answer four different questions.
| Question | The setting | Where to change it |
|---|---|---|
| Can this user see the admin panel? | Access Level | Admin → Users → All Users |
| What can this user do inside projects? | Global Role | Admin → Users → All Users |
| Which projects can this user see? | Project membership | Project → Members |
| Should this user have different permissions in one specific project? | Project Role Override | Project → Members |
A quick analogy
Think of it like a job at a large company. Your Global Role is your job title — it describes what work you are qualified to do. Your Access Level is your security badge — it controls which floors of the building you can enter. A badge does not change your job skills, and your job skills do not change which floors you can access. They are set independently.
The admin UI has three tabs
All user and access management lives under Admin → Users, which has three tabs:
- All Users — view all workspace members, change their Access Level or Global Role, invite new users
- Access Groups — create and manage reusable groups of users for project access
- Roles & Permissions — create and edit custom Global Roles and their permission sets
Explore each concept
Access Levels
Controls admin panel visibility and tenant-wide permissions. Three levels: Regular User, Project Admin, Tenant Admin.
Global Roles
Custom named roles that define what a user can do inside projects. Applies across all projects by default.
Project Access & Overrides
Which projects a user can see, and how to give them a different role in one specific project.
Access Groups
Reusable collections of users for granting project access in bulk. Not roles — groups have no permissions of their own.
Common scenarios
- I want to make someone an admin who can manage users and roles.
- Change their Access Level to Tenant Admin. See Access Levels.
- I want to restrict what someone can do in projects (e.g., view-only).
- Change their Global Role to one with limited permissions. See Global Roles.
- I want to give someone access to only one project with a specific role.
- Add them to that project and set a Project Role Override. See Project Access & Overrides.
- I want to add a group of people to multiple projects at once.
- Create an Access Group, add the users, then use the group when assigning project access. See Access Groups.