Roles and permissions in Oneflow
| INCLUDED IN This feature is included in our Business and Enterprise Plan |
As a Oneflow administrator, you can control what your colleagues are allowed to do across the platform by assigning roles with specific permissions.
There are four predefined roles. These roles are locked (indicated by a padlock icon) and are designed for different levels of access, either at the account level or the workspace level. A user can have multiple roles at the same time.
The predefined roles are:
- Administrator (account)
- Member (workspace)
- Read only (workspace)
- Workspace manager (workspace)
| INFORMATION Predefined roles cannot be edited or removed. If you need to customize permissions or create new roles, you can do so using custom roles. Not included in the business plan. 🔗 Read more here |
View role permissions
Make sure to assign the correct role by reviewing the permissions associated with each role.
- Go to Admin > Roles > Select one of the predefined roles, and open the Permissions tab.
Administrator role
An Administrator role is an account role where you manage the account at an administrative level, a user must be assigned the Administrator role.
Administrators have access to all settings under Admin, including account configuration, marketplace activation, user invitations, license management, and overall account setup.
| NOTE The Administrator role does not grant permissions to view and work with the workspace. Only to Manage workspaces on admin level. |
View, grant and remove admin account access
To view which users have administrator access or to assign the Administrator role:
- Go to Admin > Account access.
From here, you can view all users with account-level access and grant or remove roles.
Access
Choose whether a user should have access to the entire account or only to specific workspaces.
To work within a workspace, users must first be granted access. You can either give access to all workspaces or assign access per workspace.
User access - account level (access to all workspaces)
- Go to Admin > Account access
- Grant user access and select one of the predefined workspace roles.
The user will gain access to all workspaces on the account.
User access - workspace level
- Go to Admin > Workspaces.
- Click on the action menu > Grant user access.
- Choose user and what role the user should have in the selected workspace > Confirm.
INFORMATION For example, assigning the Member role under Account access gives the user access to all workspaces with the Member role. However, assigning the Administrator role under Workspace access does not grant administrative rights. |
Manage user access
If you need an overview of a specific user’s permissions, you can access this from the user settings.
Go to Admin > Users and click on a user’s name.
From here, you can see which workspaces the user has access to, the roles they have in each workspace, and whether they have administrator access at the account level.
You can also update roles or remove access directly from this view.
Related to