|
1 | 1 | # Member Roles and Permissions
|
2 | 2 | [[toc]]
|
3 | 3 |
|
4 |
| -Permissions control access to your <MainPlatformName /> projects. They can be defined for the whole workspace when inviting workspace members or for a specific project. |
| 4 | +Permissions control access to your <MainPlatformName /> projects. They can be defined for the whole workspace or for a specific project. |
5 | 5 |
|
6 | 6 | ## Workspace members and guests
|
7 | 7 | People invited to a workspace can be invited as **members** or as **guests**.
|
8 | 8 |
|
9 |
| -**Members** have access to all projects in a workspace. If a new project is created, they will be able to access it immediately. |
| 9 | +**Members** have access to *all* projects in a workspace. If a new project is created, they will be able to access it immediately. This means you do not have to grant them permissions to new projects manually. The level of access to the workspace is defined by their member roles. There are 5 [member roles](#workspace-member-roles-and-project-permissions) available: *reader*, *editor*, *writer*, *admin* and *owner*. |
10 | 10 |
|
11 |
| -**Guests** have access only to projects they are invited to. If a new project is created in a workspace, they won't see it until they are granted access. |
| 11 | +**Guests** have access only to projects they are invited to. If you want to only share specific projects with someone, you should invite them to your workspace as a guest. The level of access to a project is defined by project permissions. There are 4 [permission](#workspace-member-roles-and-project-permissions) levels: *reader*, *editor*, *writer*, and *owner*. |
12 | 12 |
|
13 | 13 | :::tip
|
14 |
| -Do you want to invite members or guests to your workspace? Visit [How to share projects and manage user access](./project-advanced/) for detailed steps. |
| 14 | +You can find detailed steps on how to invite users to your workspace in [How to share projects and manage user access](./project-advanced/#share-projects-and-manage-user-access). |
15 | 15 | :::
|
16 | 16 |
|
17 |
| -## Workspace member roles |
18 |
| -**Members** of a workspace have access to all projects in a workspace. The level of access to the project is defined by their member roles: |
19 |
| -- **Reader**: users with **read** permission are able to see the list of projects, projects data and [history](./project-details.md) |
20 |
| -- **Writer**: in addition to the **Read** access, users can also do changes in the projects: [adding/removing/updating features](../field/mobile-features/), change [layer settings and project properties](../gis/features/). Users who are expected to actively contribute to the project need to have the **write** permission. |
21 |
| -- **Admin**: in addition to the **Write** access, users with this level of access can [delete the project](./project-advanced/#delete-a-project) or [transfer](./project-advanced/#transfer-a-project) it to another workspace. Admins can also create new projects and manage workspace members. |
22 |
| -- **Owner**: in addition to the **Admin** role, owners have access to [invoicing and subscription](./subscriptions/) settings. |
| 17 | +## Workspace member roles and project permissions |
| 18 | +Member roles and project permissions present similar options in terms of what a user can or cannot do. The difference is whether these options are defined on a workspace or on a project level. Compare the overview of [workspace member roles](#workspace-member-roles-overview) and of [project permissions](#project-permissions-overview) for more details. |
23 | 19 |
|
24 |
| -| | Reader | Writer | Admin | Owner | |
| 20 | +- **Reader**: Users with **Read** permission are able to see projects, projects data and [history](../project-details), but can not make any changes. |
| 21 | +- **Editor** (available on <MainPlatformNameLink /> Cloud and <EnterprisePlatformNameLink />): In addition to the **Read** access, users can [add/remove/update features](../field/mobile-features/). They *cannot* make changes in the project properties, add/remove fields in GeoPackage layers or remove GeoPackage files from the project. Editors can: |
| 22 | + - *add* files such as photos, shapefiles, GeoPackage files - any file except for `*.qgs`, `*.qgz`, `mergin-config.json` |
| 23 | + - *edit* files except for `*.qgs`, `*.qgz`, `mergin-config.json` and non-diff based `*.gpkg` changes |
| 24 | + - *remove* files except for `*.qgs`, `*.qgz`, `mergin-config.json` and `*.gpkg` |
| 25 | +- **Writer**: In addition to the **Editor** access, users can also change [layer settings and project properties](../gis/features/). |
| 26 | +- **Admin**: This role is only available for workspace members. In addition to the **Write** access, admins can [delete the project](./project-advanced/#delete-a-project) or [transfer](./project-advanced/#transfer-a-project) it to another workspace. They can also create new projects and manage workspace members. |
| 27 | +- **Owner**: In addition to the **Admin** access, owners can also access [invoicing and subscription](./subscriptions/) settings. **Owner** has full access to the project or workspace. |
| 28 | + |
| 29 | + |
| 30 | +:::tip |
| 31 | +Invoices can be made accessible also to a person that is not a workspace member, such as someone from your accounting department. They can [access the subscription management portal using a link](./subscriptions/#accessing-subscription-management-portal-directly-without-mergin-maps-account). |
| 32 | +::: |
| 33 | + |
| 34 | +### Workspace member roles overview |
| 35 | + |
| 36 | +This is the overview of workspace member roles that are related to the whole workspace: |
| 37 | + |
| 38 | +| | Reader | Editor | Writer | Admin | Owner | |
| 39 | +|:---:|:---:|:---:|:---:|:---:|:---:| |
| 40 | +|see the list of all projects in the workspace| :white_check_mark: |:white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 41 | +|see project data| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 42 | +|see project history| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 43 | +|add/edit/delete features in all projects| :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 44 | +|add/remove layers in all projects| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 45 | +|change layer settings and project properties in QGIS| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 46 | +|create new projects| :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
| 47 | +|delete and transfer projects| :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
| 48 | +|manage access to projects| :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
| 49 | +|manage workspace members| :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
| 50 | +|access to invoicing and subscription settings| :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :white_check_mark: | |
| 51 | + |
| 52 | + |
| 53 | +### Project permissions overview |
| 54 | +Permissions to specific projects can be defined for workspace guests as well as for workspace members in addition to their member roles. |
| 55 | + |
| 56 | +This is the overview of <MainPlatformName /> project permissions: |
| 57 | + |
| 58 | +| | Reader | Editor | Writer | Owner | |
25 | 59 | |:---:|:---:|:---:|:---:|:---:|
|
26 |
| -|see the list of projects in the workspace| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 60 | +|see the project in the workspace| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
27 | 61 | |see project data| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
|
28 |
| -|see project history| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
29 |
| -|add/edit/delete features in projects| :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
30 |
| -|add/remove layers in projects| :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
31 |
| -|change layer settings and project properties in QGIS| :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
32 |
| -|create new projects| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
33 |
| -|delete and transfer projects| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
34 |
| -|manage access to projects| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
35 |
| -|manage workspace members| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
36 |
| -|access to invoicing and subscription settings| :no_entry_sign: | :no_entry_sign: | :no_entry_sign: | :white_check_mark: | |
| 62 | +|see project history| :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 63 | +|add/edit/delete features in the project| :no_entry_sign: | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
| 64 | +|add/remove layers in the project| :no_entry_sign: |:no_entry_sign: | :white_check_mark: | :white_check_mark: | |
| 65 | +|change layer settings and project properties in QGIS| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
| 66 | +|delete and transfer projects| :no_entry_sign: |:no_entry_sign: | :no_entry_sign: | :white_check_mark: | |
| 67 | +|manage access to the project| :no_entry_sign: |:no_entry_sign: | :no_entry_sign: | :white_check_mark: | |
| 68 | + |
| 69 | +Although the roles of workspace members define the level of access to projects in a workspace in general, it is possible to grant them *higher* permissions to specific projects. For instance, a workspace member with a *Reader* role can be a *Writer* or *Owner* of a project. |
37 | 70 |
|
38 | 71 | :::tip
|
39 |
| -Invoices can be made accessible also to a person that is not a workspace member, such as someone from your accounting department. They can [access the subscription management portal using a link](./subscriptions/#accessing-subscription-management-portal-directly-without-mergin-maps-account). |
| 72 | +[How to add users to a project](./project-advanced/#add-users-to-a-project) will guide you through inviting a guest to a project. These steps can be also followed to change workspace member's permission to a project. |
40 | 73 | :::
|
41 | 74 |
|
42 |
| -Members and their roles can be managed through <AppDomainNameLink /> in the [Members](./dashboard/#members) tab: |
| 75 | +### Managing member roles and project permissions |
| 76 | +Users can be [added to a workspace](./project-advanced/#add-users-to-a-workspace) as guests and members through the [Members](./dashboard/#members) tab on the <DashboardShortLink />. |
| 77 | + |
| 78 | +Here, you can also manage the member roles: |
43 | 79 | 
|
44 | 80 |
|
45 |
| -### How to transfer ownership of a workspace |
46 |
| -Ownership of a workspace can be transferred to another [workspace member](#workspace-member-roles). |
| 81 | +Project permissions can be reviewed in the details of a project in the **Collaborators** tab where you can find the list of users who can access the project and their project permissions. |
| 82 | + |
| 83 | +If needed, the project permissions can be changed here: |
| 84 | + |
| 85 | + |
| 86 | +## How to transfer ownership of a workspace |
| 87 | +Ownership of a workspace can be transferred to another **workspace member**. |
47 | 88 |
|
48 | 89 | Users with the **owner** member role have access to the **Subscriptions** page in the <DashboardShortLink />.
|
49 | 90 |
|
@@ -71,31 +112,6 @@ Be careful when downgrading your own member role!
|
71 | 112 | Only owners and admins can manage user roles so if you assign yourself the writer or reader role, you will not be able to change it back.
|
72 | 113 | :::
|
73 | 114 |
|
74 |
| -## Project permissions |
75 |
| -Permissions to specific projects can be defined for workspace guests as well as for workspace members in addition to their member roles. There are three permission levels: **reader**, **writer** and **owner**. |
76 |
| - |
77 |
| -| | Reader | Writer | Owner | |
78 |
| -|:---:|:---:|:---:|:---:| |
79 |
| -|see the project in the workspace| :white_check_mark: | :white_check_mark: | :white_check_mark: | |
80 |
| -|see project data| :white_check_mark: | :white_check_mark: | :white_check_mark: | |
81 |
| -|see project history| :white_check_mark: | :white_check_mark: | :white_check_mark: | |
82 |
| -|add/edit/delete features in the project| :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
83 |
| -|add/remove layers in the project| :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
84 |
| -|change layer settings and project properties in QGIS| :no_entry_sign: | :white_check_mark: | :white_check_mark: | |
85 |
| -|delete and transfer projects| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | |
86 |
| -|manage access to the project| :no_entry_sign: | :no_entry_sign: | :white_check_mark: | |
87 |
| - |
88 |
| -Although the roles of workspace members define the level of access to projects in a workspace in general, it is possible to grant them *higher* permissions to specific projects. For instance, a workspace member with a *Reader* role can be a *Writer* or *Owner* of a project. |
89 |
| - |
90 |
| -:::tip |
91 |
| -[How to add users to a project](./project-advanced/#add-users-to-a-project) will guide you through inviting a guest to a project. These steps can be also followed to change workspace member's permission to a project. |
92 |
| -::: |
93 |
| - |
94 |
| -Project permissions are managed in the <DashboardShortLink />. Select a project and navigate to the **Collaborators** tab to see the list of users who can access the project and their project permissions or to [invite someone](./project-advanced/#add-users-to-a-project) to contribute to your project. |
95 |
| - |
96 |
| -You can also easily change project permissions of current collaborators. |
97 |
| - |
98 |
| - |
99 | 115 |
|
100 | 116 | ## Public and private projects
|
101 | 117 |
|
|
0 commit comments