01 · Roles
Four roles, the same in every module.
01OwnerEverything, including roles, billing and turning modules on or off.
02AdminManages members and teams, shares docs outside the org and reads the audit log.
03MemberCreates and edits work in the projects they can see.
04GuestSees only the projects and docs shared with them.
02 · One permission system
Access set once, carried everywhere.
There is no separate permission setup per module. Each step below narrows or extends the one before it.
1
Workspace roleOwner, Admin, Member or Guest. It sets what a person can do in every module.
2
Project accessA project decides who can see it. Its tasks and docs inherit that access.
3
Item sharingShare one doc or task with a guest. They get that item and nothing else.
4
SearchSearch returns only what you are allowed to see, in every module.
5
Audit logEach change above is written to the log.
03 · Audit log
Every change, who made it and when.
Role changes, module switches, shares and edits in every module go to one log. Owners and Admins can read it. The entries below are an example.
WhenWhoWhatModule
Oct 14 · 11:20Mira Okaforshared “Onboarding checklist v2 — spec” with Growth teamDocs
Oct 14 · 11:02Tomás Reyesinvited 2 guests to Onboarding v2Teams
Oct 14 · 10:31Priya Shahremoved “Modules · turn on or off” from AdminRoles
Oct 14 · 10:05Mira Okaformoved ZEN-142 to In progressTasks
Oct 14 · 09:40Jonas Lindturned on Tasks for FernwayModules
Oct 14 · 09:12Priya Shahgave Member edit access to DocsRoles
04 · Scope of this page
What this page does not cover.
Certifications, single sign-on, two-factor sign-in and encryption are not described here. If your team needs answers on any of them before signing up, send us a question and we will tell you where each one stands.
Ask a security question