Roles, permissions and apps in a workspace

A workspace has four roles: owner, admin, member and contractor. Owners and admins can do everything. A member's access is set per app: view, create, edit, delete and approve are decided separately for each module. A contractor is outside the team and holds no app permissions.

• Owner: full control, including transferring ownership and deleting the workspace.
• Admin: every app and every action, plus managing the team.
• Member: the normal working role, governed by each app's permissions.
• Contractor: someone from outside the company, such as a freelancer, a self-employed specialist or another company. A contractor takes no paid seat, has no HR record, is not in the team chat and cannot open any of the workspace's apps.

People join by invitation with the role you choose and see the workspace after they accept. Only admins can change roles or remove people, and the owner cannot be removed.

Apps

The core apps are installed automatically: projects, tasks, files, notes, calendar, members, activity, clients, the public page and meetings. CRM, inventory, HR and finance are optional. Owners and admins add or remove them under Manage apps in workspace settings.

Adding an app does not open it to everybody. Each app has its own role defaults; for example, switching on HR or finance gives members view-only access until you change it. Review the defaults when you add a sensitive app.

HR permission controls the hiring pipeline: applications to your job posts, with candidate details, are visible to owners, admins and people with HR permission.