Permission management in awork

Control who can see and edit what. Learn how to manage permissions efficiently.

---

Key benefits and use cases

• Easy role management: Understand who has access to what.
• Clear structure: General roles and project roles define specific access rights.
• Flexibility: Tailor permissions to your team's needs.

---

Opening permission management

1. Go to Einstellungen (the gear icon in the bottom-left corner of the main menu).
2. Click Rechtemanagement.

---

General permission roles

• Everyone in the workspace has a general permission role, such as Admin or User.
• Important: If a user isn't a project member, only the permissions of their general role apply.

Creating a general role

1. In the Allgemeine Berechtigungsrollen section, click + Rolle.
2. Enter a name and choose either a blank role or a template.
3. Customize the individual permissions.

Preconfigured roles

• Admin: Has full access and can manage workspace settings.
• User: Can work with projects but can't change central settings.

Setting menu visibility for each role

In the details of a permission role, you'll find the Menü-Sichtbarkeit tab, where you can choose which sections are visible in the menu.

Important: If the eye icon is disabled, the role doesn't have the required permissions.

Assigning general roles

At the bottom of the Rechtemanagement page, you'll find a list of all users. You can assign a role to each person there.

Note: You can't remove yourself from the Admin role.

---

Managing project roles

Project roles define specific permissions at the project level.

Creating a project role

1. In the Projektspezifische Berechtigungsrollen section, click + Rolle.
2. Enter a name and set the viewing and editing permissions.

Optional: Mark the role as the Standardrolle so it's selected by default when adding members to projects.

---

Editing or deleting a role

In the role overview, you can edit or delete roles using the action button.

---

Permissions in detail

Projects

AI permissions

With a paid AI plan, you can configure in the general permission role who can use, share, and edit the awork Agent and specialized agents.

Users

Only Admins can add new users.

Customers

Settings

---

Tips and notes

• Project roles only extend permissions. They can't take permissions away.

• You can't remove yourself from the Admin role.

• Project creators always keep full permissions for their projects.

• Access to specific projects only: If users should only have access to selected projects, we recommend the following:

  • Keep cross-project permissions restrictive in the general role, such as access to all projects, project tasks, and project time entries.
  • Then add the person as a project member for the specific projects and grant them the permissions they need in each project through the project role.

---

FAQ

Can users see only their own projects and tasks?

Yes. You can configure a general role so that users can only see projects they're a member of.

Is there a setting that prevents users from tracking time altogether?

Yes. Admins can disable time tracking for the entire workspace under Einstellungen > Workspace. This is available starting with the Professional plan.

Who can delete projects?

Users who are allowed to manage project details (through the general role and/or a project role) can delete projects. In addition, users can always delete projects they created themselves.

Do these permissions also apply to the API?

Yes. The permissions configured in permission management also apply to access through the awork API.