Permission management in awork
Manage permission roles at workspace and project levels to control who can access, edit, and view your projects and workspace features
Control who can see and edit what. Learn how to manage permissions efficiently.
Key benefits and use cases
- Easy role management: Understand who has access to what.
- Clear structure: General roles and project roles define specific access rights.
- Flexibility: Tailor permissions to your team’s needs.
Permission management in awork is based on two levels:
- General permission roles (workspace level): Apply across the entire awork workspace.
- Project roles (project level): Apply only to specific projects that a user is a member of.
Open permission management
- Go to Einstellungen (the gear icon in the bottom-left corner of the main menu).
- Click Rechtemanagement.
Only users with the Admin role can configure these settings.
General permission roles
- Everyone in the workspace has a general permission role, such as Admin or User.
- Important: If a user isn’t a project member, only the permissions of their general role apply.
Create a general role
- In the Allgemeine Berechtigungsrollen section, click + Rolle.
- Enter a name and choose either a blank role or a template.
- Adjust the individual permissions.
Preconfigured roles
- Admin: Full access and can manage workspace settings.
- User: Can work with projects but can’t change central settings.
Set menu visibility for each role
In the details of a permission role, you’ll find the Menü-Sichtbarkeit tab, where you can choose which sections are visible in the menu.
Important: If the eye icon is disabled, the role doesn’t have the required permissions.
Assign general roles
At the bottom of the Rechtemanagement page, you’ll find a list of all users, where you can assign a role to each person.
Note: You can’t remove yourself from the Admin role.
Manage project roles
Project roles define specific permissions at the project level.
Important: Project roles can extend permissions, but they can’t restrict them. Restrictions are always controlled through the general role.
Create a project role
- In the Projektspezifische Berechtigungsrollen section, click + Rolle.
- Enter a name and set the viewing and editing permissions.
Optional: Mark the role as a Standardrolle so it’s preselected when you add members to projects.
Edit or delete a role
In the role overview, you can edit or delete roles using the action button.
Important: The system role Admin can’t be edited or deleted. If you delete a role that’s already assigned to users, you’ll need to choose a replacement role.
Permissions in detail
Projekt erstellen | Aktiv Users can create projects.
Users can’t create projects.
|
Projektdetails | Verwalten
Lesen
Keine
|
Projektaufgaben | Verwalten
Lesen
Keine
|
Projektzeiten | Verwalten
Lesen
Keine
|
Users
Only Admins can create new users.
User-Details | Verwalten
Lesen
Keine
|
User-Zeiten | Verwalten
Lesen
Keine
|
User-Planung | Verwalten
Lesen
Keine
|
Customers
Kunden-Details | Verwalten
Lesen
Keine
|
Settings
Projekteinstellungen |
|
Aufgabeneinstellungen |
|
Allgemeine Einstellungen |
Note: Only Admins can delete the workspace. |
Tips & notes
Keep in mind:
-
Project roles only extend permissions. They can’t remove permissions.
-
You can’t remove yourself from the Admin role.
-
Project creators always retain full permissions for their projects.
Tip: Restrict access to specific projects
If you want users to access only selected projects, we recommend the following:
-
Keep cross-project permissions in the general role restrictive, such as access to all projects, project tasks, and project time entries.
-
Then add the person as a project member and grant them the permissions they need for that project through the project role.
FAQ
Can users only see their own projects and tasks?
Yes. You can configure a general role so that users only see projects they’re a member of.
Is there a setting that prevents users from tracking time at all?
Yes. Admins can disable time tracking for the entire workspace under Einstellungen > Workspace. This is available starting with the Professional plan.
Who can delete projects?
Users who can manage project details through their general role and/or project role can delete projects. In addition, users can delete projects they created themselves at any time.
Do the permissions also apply to the API?
Yes. The permissions configured in permission management also apply to access through the awork API.
