Roles and access

Two ideas sit side by side. A workspace role says which settings you can open. Access on a contract says whether you can see or change that contract.

Workspace role

	Member	Admin
Contracts, Key dates, Counterparties, Tasks, Reports	Yes	Yes
Settings you can open	API tokens only	Every section, including Audit Centre
Invite, deactivate, remove, and the admin switch	No	Yes
Teams, contract types, fields, counterparty admin, reminders, service accounts, webhooks, sign-in, AI	No	Yes

A member who opens an admin address sees “You don’t have access to this page.” and “Ask a workspace admin if you need it.”

Turn admin on or off from Members, in the switch labelled Admin: and the person’s name. The column reads Admin or Member. “The last admin can’t be removed.” means make someone else an admin first. “Reactivate this member before making them an admin.” means the person is deactivated.

Deactivate signs someone out and keeps their contracts and tasks assigned to them. Remove from workspace ends the membership. History keeps their name, labelled (removed). You cannot remove yourself. Details are on Members.

Access to one contract

The access you get is the highest of these:

• You are an admin of the workspace. Admins can always open a contract.
• You are an owner. Owners have Full access.
• A team you belong to has View or Edit on the contract type.
• Someone granted you View or Edit on this contract.

View can read the contract, its files, notes, and tasks, and can add notes and tasks. Edit can change the fields and the status, and can upload a new document version. Full access, which owners and admins have, can archive, restore, change owners, and grant View or Edit. A grant cannot give Full.

A deactivated member gets no access. An archived team’s grants give nothing until the team is restored. A contract in another workspace never appears.

The person who adds a contract is always an owner. The line on New contract says “You’re an owner because you’re adding this contract.”