User Roles & Permissions
Comprehensive guide to organization and project-level roles, permissions, and access control in Asrify. Learn about Owner, Admin, Member, and Guest roles.
User Roles & Permissions
Master Asrify's role-based access control system with organization-level and project-level permissions for secure collaboration.
1 Overview of Role Structure
Asrify uses a hierarchical role system with four main roles that apply at both organization and project levels:
Organization Level
- - Controls access to the entire organization
- - Manages billing, financials, and member data
- - Overrides project-level permissions
- - Sets organization-wide policies
Project Level
- - Controls access to specific projects
- - Manages project tasks and boards
- - Independent from organization roles
- - Inherits from higher organization roles
Important: Organization Owners and Admins automatically have Owner and Admin privileges on all projects within their organization, even if they're not explicitly added as project members.
2 Organization Roles & Permissions
Organization roles control access to company-wide features, financial data, and member management:
Organization Owner
Complete control over the organization with full administrative and financial access
Core Permissions
- - Manage, update, and delete organization
- - Add and remove organization members
- - Assign and modify user roles
- - Manage organization settings and policies
Financial & Business
- - View all income and outcome data
- - Access complete financial reports
- - Manage member pay details and rates
- - Manage client information and billing
Project Access
- - Full access to all organization projects
- - Can manage any project as if they were project owner
- - Override project-level permissions
- - Access all project analytics and reports
Advanced Features
- - Configure integrations and API access
- - Manage security settings and audit logs
- - Set up organization-wide workflows
- - Control data export and backup settings
Organization Admin
Nearly full administrative access with some restrictions on critical operations
Administrative Rights
- - All Owner permissions except deletion
- - Manage organization members and roles
- - Configure organization settings
- - Manage projects and assign project roles
Financial Access (Optional)
- - No financial access by default
- - Owner can grant financial permissions
- - Can view reports if permission granted
- - Cannot modify billing or payment settings
Restrictions
- - Cannot delete the organization
- - Cannot remove organization owners
- - Cannot access financials without permission
- - Cannot modify critical security settings
Project Access
- - Full access to all organization projects
- - Can manage projects as if they were project admin
- - Access project analytics and reports
- - Can create and assign project permissions
Organization Member
Standard user with access limited to assigned projects and personal tasks
Basic Access
- - View only assigned projects
- - Access personal dashboard and analytics
- - Manage own profile and settings
- - Track personal time and tasks
Project Participation
- - Work on assigned projects only
- - Project permissions depend on project role
- - Cannot see organization-wide data
- - Limited to own work and assigned tasks
Organization Guest
Very limited access for external stakeholders or clients
Minimal Access
- - View only what's explicitly shared
- - Cannot create or modify data
- - Read-only access to assigned content
- - Limited to specific projects or boards
Typical Use Cases
- - External clients reviewing project progress
- - Stakeholders monitoring specific initiatives
- - Vendors with limited collaboration needs
- - Audit or compliance reviewers
3 Project-Level Roles & Permissions
Project roles control access to specific project features, tasks, and collaboration tools:
Project Owner
Complete control over the project with full management capabilities
Project Management
- - Update and modify project settings
- - Delete or archive the project
- - Manage project timeline and milestones
- - Configure project workflows and automation
Team & Access Control
- - Add and remove project members
- - Assign and modify project roles
- - Manage project permissions and access
- - Control board and task visibility
Analytics & Reporting
- - Access all project analytics and reports
- - View team productivity metrics
- - Export project data and time reports
- - Monitor project budget and resources
Content Management
- - Create, edit, and delete all project content
- - Manage all boards, tasks, and workflows
- - Configure project templates and standards
- - Control project documentation and files
Project Admin
Administrative access to project features with member management capabilities
Administrative Functions
- - Most project owner permissions
- - Manage project members and roles
- - Configure project settings and workflows
- - Access project analytics and reports
Content & Board Management
- - Create and manage boards and workflows
- - Edit and organize all project tasks
- - Manage project documentation
- - Configure board permissions and access
Restrictions
- - Cannot delete the project
- - Cannot remove project owners
- - May have limited financial access
- - Cannot modify critical project settings
Team Coordination
- - Assign tasks and manage workloads
- - Review and approve team submissions
- - Monitor team progress and performance
- - Facilitate project communication
Project Member
Standard project participant with task management and collaboration access
Task & Board Access
- - View boards they're members of
- - Create, edit, and manage assigned tasks
- - Participate in board workflows
- - Comment and collaborate on tasks
Time & Progress Tracking
- - Track time on assigned tasks
- - Update task progress and status
- - View personal project analytics
- - Submit work for review and approval
Collaboration Features
- - Participate in project discussions
- - Share files and project documentation
- - Receive project notifications and updates
- - Access project calendar and events
Limitations
- - Cannot manage other members' tasks
- - Limited to assigned boards and tasks
- - Cannot modify project settings
- - No access to project-wide analytics
Project Guest
Limited access for external stakeholders and clients
View-Only Access
- - Read-only access to assigned boards
- - View specific tasks and project updates
- - Limited to explicitly shared content
- - Cannot create or modify any data
Communication
- - Comment on specific tasks if permitted
- - Receive project update notifications
- - View project progress reports
- - Access shared project documentation
4 Board & Task Permissions
Board-level permissions follow the same structure as projects with additional granular controls:
Board Access Rules
- - Organization Owners and Admins can access all boards in their organization
- - Project Owners and Admins can access all boards within their projects
- - Members and Guests only see boards they're explicitly added to
- - Board permissions inherit from project permissions but can be restricted
Task Management Permissions
Task Creation & Editing
- - All roles except Guests can create tasks
- - Members can edit their own assigned tasks
- - Admins and Owners can edit any task
- - Task assignment requires Member role or higher
Task Organization
- - Move tasks between columns/stages
- - Set task priorities and due dates
- - Add task labels and categories
- - Attach files and documentation
Board Configuration
- - Board structure and workflow setup (Admin/Owner only)
- - Column/stage configuration and automation rules
- - Board-specific permission and access controls
- - Integration setup and custom field configuration
5 Analytics & Reporting Permissions
Access to reports and analytics varies based on role and organizational settings:
Organization-Level Analytics
Financial Reports
- - Organization Owners: Full financial access
- - Organization Admins: Access if granted by Owner
- - All other roles: No financial access
- - Includes revenue, expenses, profitability
Operational Reports
- - Organization Owners and Admins: Full access
- - Project Owners: Project-specific reports
- - Members: Personal productivity reports only
Project-Level Analytics
Project Performance
- - Task completion rates and timelines
- - Team productivity and workload distribution
- - Project budget and resource utilization
- - Time tracking and billable hours analysis
Access Levels
- - Owners/Admins: Complete project analytics
- - Members: Personal performance metrics
- - Guests: Limited to shared report summaries
Custom Report Creation
- - Organization and Project Owners: Create and share custom reports
- - Admins: Create reports with appropriate data access
- - Members: Generate personal productivity reports
- - Export capabilities vary by role and data sensitivity
Permission Management Best Practices
Security Guidelines
- - Follow principle of least privilege
- - Regularly audit user access and roles
- - Use Guest roles for external stakeholders
- - Enable two-factor authentication for Owners/Admins
Role Assignment
- - Assign roles based on job responsibilities
- - Use project-level roles for task-specific access
- - Limit Owner and Admin roles to essential personnel
- - Review permissions during team changes
Access Control
- - Document permission structures for compliance
- - Set up approval workflows for sensitive data
- - Use board-level permissions for granular control
- - Monitor access logs and user activity
Need Help with Permissions?
Setting up the right permission structure is crucial for security and productivity. Explore these related topics: