Skip to main content

Permission management in awork

Manage permission roles at workspace and project levels to control who can access, edit, and view your projects and workspace features

Control who can see and edit what. Learn how to manage permissions efficiently.


Key benefits and use cases

  • Easy role management: Understand who has access to what.
  • Clear structure: General roles and project roles define specific access rights.
  • Flexibility: Tailor permissions to your team’s needs.

Permission management in awork is based on two levels:

  1. General permission roles (workspace level): Apply across the entire awork workspace.
  2. Project roles (project level): Apply only to specific projects that a user is a member of.

Open permission management

  1. Go to Einstellungen (the gear icon in the bottom-left corner of the main menu).
  2. Click Rechtemanagement.

Only users with the Admin role can configure these settings.


General permission roles

  • Everyone in the workspace has a general permission role, such as Admin or User.
  • Important: If a user isn’t a project member, only the permissions of their general role apply.

Create a general role

  1. In the Allgemeine Berechtigungsrollen section, click + Rolle.
  2. Enter a name and choose either a blank role or a template.
  3. Adjust the individual permissions.

Preconfigured roles

  • Admin: Full access and can manage workspace settings.
  • User: Can work with projects but can’t change central settings.

Set menu visibility for each role

In the details of a permission role, you’ll find the Menü-Sichtbarkeit tab, where you can choose which sections are visible in the menu.

Important: If the eye icon is disabled, the role doesn’t have the required permissions.

Assign general roles

At the bottom of the Rechtemanagement page, you’ll find a list of all users, where you can assign a role to each person.

Note: You can’t remove yourself from the Admin role.


Manage project roles

Project roles define specific permissions at the project level.

Important: Project roles can extend permissions, but they can’t restrict them. Restrictions are always controlled through the general role.

Create a project role

  1. In the Projektspezifische Berechtigungsrollen section, click + Rolle.
  2. Enter a name and set the viewing and editing permissions.

Optional: Mark the role as a Standardrolle so it’s preselected when you add members to projects.


Edit or delete a role

In the role overview, you can edit or delete roles using the action button.

Important: The system role Admin can’t be edited or deleted. If you delete a role that’s already assigned to users, you’ll need to choose a replacement role.


Permissions in detail

Projekt erstellen

Aktiv

Users can create projects.


​Inaktiv

Users can’t create projects.


​Important: The project creator always has all permissions for that project.

Projektdetails

Verwalten

  • View all projects in the project overview

  • View and edit the details of all projects

  • Delete projects

Lesen

  • View all projects in the project overview

  • View the details of all projects

Keine

  • Only see projects they’re a member of

Projektaufgaben

Verwalten

  • View, edit, create, and delete tasks in all projects

  • Use task templates within projects

Lesen

  • View tasks in all projects

  • Can’t edit task details or add comments

Keine

  • No general access to project tasks, except through project membership and project roles

Projektzeiten

Verwalten

  • View, edit, and delete time entries for all projects

  • View total time for project and task progress

Lesen

  • View time entries for all projects

  • View total time for project and task progress

Keine

  • No general access to project time entries, except through project membership and project roles

  • No aggregated time data for project and task progress

Users

Only Admins can create new users.

User-Details

Verwalten

  • View the overview and details for all users

  • Activate or deactivate users

  • Edit users

Lesen

  • View the overview and details for all users

Keine

  • Can’t view the overview or user details

  • Only people they share projects with are visible, for example, when mentioning or assigning someone

User-Zeiten

Verwalten

  • View and edit all time entries logged by other users, even if they aren’t linked to a project

Lesen

  • View all time entries logged by other users, even if they aren’t linked to a project

Keine

  • No general access to other users’ time entries, except through project membership, project roles, or general permissions for project time entries

User-Planung

Verwalten

  • Open the planner and view planning data for users within the scope, including workload, capacity, availability and absences, and project budget

  • Edit planning data, including user capacity, planned tasks and bookings, and absences

  • Create, edit, and delete workspace-wide absences

Lesen

  • Open the planner and view planning data and availability

Keine

  • No access to the planner

Customers

Kunden-Details

Verwalten

  • View, edit, and delete all customers

  • Create new customers

Lesen

  • View the customer overview and customer details

  • Select customers when creating new projects

Keine

  • No access to the customer overview or customer details

Settings

Projekteinstellungen

  • Create and manage project templates and project types

Aufgabeneinstellungen

  • Create, edit, and delete activities and task templates, including in project templates

Allgemeine Einstellungen

  • Manage workspace settings, such as the name, logo, and URL

  • Manage integrations

  • Manage time tracking settings

Note: Only Admins can delete the workspace.


Tips & notes

Keep in mind:

  • Project roles only extend permissions. They can’t remove permissions.

  • You can’t remove yourself from the Admin role.

  • Project creators always retain full permissions for their projects.

Tip: Restrict access to specific projects

If you want users to access only selected projects, we recommend the following:

  • Keep cross-project permissions in the general role restrictive, such as access to all projects, project tasks, and project time entries.

  • Then add the person as a project member and grant them the permissions they need for that project through the project role.


FAQ

Can users only see their own projects and tasks?

Yes. You can configure a general role so that users only see projects they’re a member of.

Is there a setting that prevents users from tracking time at all?

Yes. Admins can disable time tracking for the entire workspace under Einstellungen > Workspace. This is available starting with the Professional plan.

Who can delete projects?

Users who can manage project details through their general role and/or project role can delete projects. In addition, users can delete projects they created themselves at any time.

Do the permissions also apply to the API?

Yes. The permissions configured in permission management also apply to access through the awork API.

Last updated HappySupportPowered by happysupport.ai
© 2026 HappySupport. All rights reserved.
HappySearch can make mistakes.

Sources

No articles yet

Search to see source articles