Overview
Access groups let you limit which projects a member can see and work in. By default, every member of an organization has full access to all of its projects. Once you add a member to one or more access groups, they can only reach the projects those groups grant — everything else disappears from their view. Use access groups when you want to give external collaborators, contractors, or focused teams access to only the projects that concern them, without spreading that access across your whole organization.Access groups only restrict Collaborators and Viewers. Organization Admins always
have full access to every project and are never limited by a group.
How Access Works
Access groups follow a simple, additive model:- A member in no group has full access. Until you place someone in a group, they can see every project in the organization.
- A member in one or more groups sees the union of those groups’ projects. If a member belongs to two groups, they can reach the combined set of projects from both.
- Admins are never restricted. Their access is always organization-wide, regardless of any group.
Because a member with no group keeps full access, adding someone to their first bounded
group is the moment their access actually narrows. The app asks you to confirm this step so
it’s never a surprise.
Opening Access Groups
The Access Groups page lists every group in your organization, showing each group’s name,
its member count, and how many projects it grants (or All projects if it covers
everything).
Only Admins can create, edit, or delete access groups and manage their members
and projects.
Creating a Group
Managing Members
Open a group’s three-dot menu and select Members to control who belongs to it.Add a member
Use the Add member dropdown to select an organization member. Admins
appear as Full access and cannot be added — they aren’t restricted by groups.
Confirm the first restriction
If the member currently has full access (they’re in no other group) and this group is
limited to specific projects, you’ll be asked to confirm. Adding them cuts their access
down to only the projects their groups grant.
Managing Projects
Open a group’s three-dot menu and select Projects to choose which projects it grants.A group set to All projects gives its members organization-wide project access while
still keeping them in the group. Turn the toggle off to return to a specific list of
projects.
Editing a Group
From a group’s three-dot menu, select Edit to rename the group or toggle its All projects setting.Deleting a Group
From a group’s three-dot menu, select Delete and confirm.Assigning Groups When Inviting
You can place a new member into access groups at the moment you invite them, so their access is scoped from the start.Choose a role
Select Collaborator or Viewer. (Admins are always full-access, so the group
selector is disabled for them.)
Select access groups
Use the Access Groups multi-select to choose one or more groups. Leave it empty to
give the new member full access to all projects.
Groups that grant every project appear in the selector marked (All projects).
Best Practices
Name groups by team or purpose
Name groups by team or purpose
Clear names like External accountants or EU marketing make it obvious who belongs in
each group and why.
Assign groups at invite time
Assign groups at invite time
Scope external collaborators from the moment they join so they never briefly see
projects they shouldn’t.
Keep Admins few
Keep Admins few
Admins bypass all group restrictions. Reserve the Admin role for people who genuinely
need organization-wide access.
Review group membership regularly
Review group membership regularly
Remove people from groups when their involvement ends to keep project access tidy.
Troubleshooting
A member can't see a project they need
A member can't see a project they need
Add them to a group that grants that project, or turn on the group’s All projects
toggle. Remember that a member sees the combined projects of every group they’re in.
A member still sees every project
A member still sees every project
They’re likely in no group (which means full access) or they’re an Admin.
Add them to a bounded group to restrict a Collaborator or Viewer; Admins can’t be restricted.
I can't manage access groups
I can't manage access groups
Only Admins can create and manage groups. Check your role on the Members
tab.
A removed member regained full access
A removed member regained full access
That’s expected — removing someone from their last group returns them to full access.
Add them to another bounded group to keep their access scoped.
Related Documentation
Member Roles
Understand Admin, Collaborator, and Viewer permissions.
Member Invites
Invite new members and assign their access.
Projects
Manage the projects within your organization.
General Settings
Configure organization basics.