Manage project access

Before you get started

• You must be a project Admin, or an Account Administrator, to manage who has access.

How project access works

A project is the outer gate. Users and teams are added to each one separately, and anyone who is not a member cannot see it, or any inbox, design or authenticator device inside it.

Account Administrators are the exception. They reach every project on the account and are included by default, so you do not need to add them.

Add a user or team to a project

1. Click the project switcher at the top of the left-hand navigation.
2. Hover over the one you want to change, then click the settings icon.
3. Under Project members, search for a user or team by name or email address.
4. Select the user or team. It is added as a Viewer. Use the dropdown next to the name to choose a different role.
5. Click Save.

You can assign different roles to different users and teams on the same project.

Project roles

Role	What they can do
Viewer	View the project and everything inside it. In any inbox that is not restricted, the same access as an inbox Writer. Read TOTP codes from authenticator devices
Editor	Everything a Viewer can do, plus create and delete inboxes, inbox Admin access to every inbox in the project, and create, edit and delete designs and authenticator devices
Admin	Everything an Editor can do, plus rename the project, manage its members, and delete it

Remove a user or team from a project

1. Click the project switcher at the top of the left-hand navigation.
2. Hover over the one you want to change, then click the settings icon.
3. Under Project members, find the user or team you want to remove.
4. Select Remove from project from the dropdown next to their name.
5. Click Save.

The member loses access to the project and everything inside it. Nothing is deleted, and the user remains on your account. To remove someone from the account entirely, see Managing users and teams.

Restricted inboxes

An individual inbox can be restricted so that only named users and teams can see it. Project membership on its own does not open one.

A restricted inbox is visible to:

• Account Administrators
• Project Editors and Admins of the project it belongs to
• Users and teams granted access on the inbox itself

Project Viewers cannot see a restricted inbox unless they are granted access on the inbox directly.

Access granted on the inbox itself carries its own role. A Viewer on a restricted inbox can read its messages and open screenshots that other people have generated, but cannot generate new ones, because that needs write access to the inbox. See Manage inbox access.

Related pages

• Permissions — how account, project and inbox permissions fit together
• Manage inbox access — restrict an individual inbox
• Managing users and teams — invite people to your account