Work item permissions
Fine grained permissions settings are available for work items
Understanding work item permissions
Work items inherit permissions from:
- The organisation
- The type of work item
- The project assigned to the work item
- The project package assigned to the work item
If the user has a role with the deny permission for any of organisation, work item type, project, or project package they will be denied from that permission for a work item. The table below demonstrates examples of the permissions evaluation matrix.
Organisation | Work item type | Project | Project package | Can? |
---|---|---|---|---|
➖ Inherit | ➖ Inherit | ➖ Inherit | ➖ Inherit | No |
✔ Allow | ➖ Inherit | ➖ Inherit | ➖ Inherit | Yes |
➖ Inherit | ✔ Allow | ➖ Inherit | ➖ Inherit | Yes |
➖ Inherit | ➖ Inherit | ✔ Allow | ➖ Inherit | Yes |
➖ Inherit | ➖ Inherit | ➖ Inherit | ✔ Allow | Yes |
❌ Deny | ❓ Any | ❓ Any | ❓ Any | No |
❓ Any | ❌ Deny | ❓ Any | ❓ Any | No |
❓ Any | ❓ Any | ❌ Deny | ❓ Any | No |
❓ Any | ❓ Any | ❓ Any | ❌ Deny | No |
If a user has any role with ❌ Deny, then the permission for organisation, work item type, project, project package will be deny, even if they are allowed by any other role. If you want to allow users to inherit an ✔ Allow permission, make sure to leave any other role the user is assigned as ➖ Inherit.
A user may also inherit an ✔ Allow permission from being invited to participate in a work item schedule, or from sharing.
Types of work item permissions
The following permissions are available for work items:
Permission | Description |
---|---|
Administer work item settings | A user with this permission can perform administrative tasks to administrate work items. |
Create work items | A user with this permission can create new work items and update existing work items. |
Schedule work items | A user with this permission can add schedules to work items. |
Invite people to work items | A user with this permission can invite people to attend a work item schedule. |
Perform work on work items | A user with this permission can fill in results, initiate actions, and add logs to work items. |
View work items | A user with this permission can view all the details, schedules, attachments, and logs for work items. |
Work item type permissions
- Click on the menu button to open the menu
- Make sure the organisation you are updating work item type permissions for is selected
- Click the gear icon next to the organisation name to go to the settings screen for your organisation
- Click the
Work item types
menu option - Click the work item type you want to update permissions for
- Click
Permissions
in the top right of the form to show the permissions modal - Select a role to adjust permissions for the role
- Make changes to the permissionsn for Deny, Inherit, Allow
- Click
Save
to save the permissions for the role