#Understanding Permissions - Role Management Guide

Permissions control what actions users can perform. The permission system uses four action types:

#Permission Types

View (Yellow):

• Read-only access to view items
• Required for any other permissions in a category
• If View is removed, all other permissions in that category are automatically removed

Create (Green):

• Ability to create new items
• Automatically grants View permission
• Examples: Creating test cases, creating projects, inviting users

Update (Blue):

• Ability to modify existing items
• Automatically grants View permission
• Examples: Editing test cases, updating user roles, modifying settings

Delete (Red):

• Ability to remove items
• Automatically grants View permission
• Examples: Deleting test cases, removing users, deleting projects

#Permission Categories

#Workspace Permissions

• Users: Manage workspace members
• Groups: Manage user groups
• Projects: Create and manage projects
• Roles: Manage roles and permissions
• Settings: Configure workspace settings
• Custom Fields: Manage workspace-level custom fields
• Parameters: Manage workspace-level parameters
• Shared Steps: Manage workspace-level shared steps
• Integrations: Configure integrations
• Access Tokens: Manage API tokens
• Test Runs: View workspace-level test runs
• Defects: View workspace-level defects

#Project Permissions

• Test Cases: Manage test cases
• Test Suites: Manage test suites
• Test Runs: Create and manage test runs
• Defects: Create and manage defects
• Requirements: Manage requirements
• Releases: Manage releases
• Repository: Access test repository
• Settings: Configure project settings
• Custom Fields: Manage project-level custom fields
• Parameters: Manage project-level parameters
• Shared Steps: Manage project-level shared steps

#Permission Dependencies

When configuring permissions, keep in mind:

• View is Required: If you remove View permission from a category, all other permissions (Create, Update, Delete) in that category are automatically removed
• Create/Update/Delete Grant View: If you grant Create, Update, or Delete permission, View permission is automatically granted
• Cascading Changes: Changes to permissions affect all users and groups assigned to the role immediately

#Best Practices

1. Principle of Least Privilege: Grant only the minimum permissions necessary
2. Understand Dependencies: Be aware of how permissions interact
3. Test Permissions: Verify permissions work as expected before assigning roles
4. Regular Review: Periodically review role permissions and assignments