Grant Permissions
In Space, individual permissions cannot be granted directly to a user. To provide a user with specific permissions, you grant that user a Role which contains those permissions.
note
Before assigning any Role, please see the description of the Default Roles and the Roles comparison table.
System Admin is the default Role that contains a set of global permissions. The global permissions are valid across the entire organization.
You grant these permissions to users on the Roles page, by adding a user to the System Admin Role. You can add teams as well.
On the main menu, click
Administration and choose Roles.
On the left pane, choose System Admin.
Existing System Admins will be listed on the right pane.
Add a user or team by entering their name into the text field or choosing them from the drop-down list.
![administrationAddSystemAdmin.png administrationAddSystemAdmin.png](https://resources.jetbrains.com/help/img/space/administrationAddSystemAdmin.png)
Important! The System Admin Role cannot be modified, you can't add or remove permissions from it. However, you can create a custom role with your own selection of global permissions and grant it (add users to it) in a similar manner.
warning
Team Lead role will soon be discontinued. Please use the Manager role instead.
Team Admin Role is granted by adding a user to an Administrators group in a specified team. Team Admin Role is only valid within the team for which it has been issued.
On the main menu, click
Administration and choose Teams.
Click the team you want to edit.
Click Administrators.
Add a user by entering their name into the text field or choosing them from the drop-down list:
To revoke the admin rights, click
next to the person's name.
Manager Role is granted to a person over his/her subordinates. It is assigned by selecting a subordinate member first and then choosing a Manager for that member.
On the main menu, click
Administration and choose Teams.
Click the team of the subordinate member.
On the sidebar, click Members.
Click
next to the subordinate member and choose Edit:
In the Manager field, select a person that should be the member's Manager.
The selected person will be granted the Manager Role over the selected subordinate member.
Click Save.
Access to each project is managed independently by the project's administrator, which is initially a user that created the project. The project administrator can grant access to other users by giving them the Project Member and Project Admin roles for that project. See Manage Access to a Project for instructions.
System Admin cannot administer a project unless he or she is the one who created it or was granted the Project Admin role by a current project administrator.
However, System Admin can modify templates for the predefined project-specific Roles (permission sets) by adding or removing permissions from them. The role templates can be then used by Project Admins as predefined Roles to assign those Roles to their project participants. A Project Admin can override the template configuration in his or her project by editing predefined Roles or creating new Roles .
Thanks for your feedback!