professional plan

Per-Project Roles & Team Groups

Give each person a role per project, and whole teams access through groups.

Per-project roles and groups: the Payments projects are the Checkout and Refunds APIs and the Platform projects are the Identity and Notifications APIs; one user, Priya, is a Contributor on Checkout API, a Reader on Refunds API and Identity API and has no access to Notifications API, and the QA team group gets Reader access on the Payments projects

What It Does

Per-project roles and team groups give larger teams the access model they need. Membership is managed per project, so access is precise: the same person can hold Contributor where they build tests and Reader where they only review results, without juggling logins. Each project's Members tab lists every member with their project role, their global role and how the access was granted (invitation, manual, owner or an SSO group). On Enterprise and in the Trial, an administrator can create groups, add members and give the group a role on a project, so onboarding a team is one change instead of many; groups mapped in the SSO configuration are checked against the identity provider's claim at each sign-in. The platform also has a workspace object that can scope group grants, but there is no screen to create workspaces or move projects between them yet, so plan around projects and groups today.

Overview

Assign each member a role that can vary from one project to the next: a person can be a Contributor where they own the work and a Reader elsewhere, all under a single account. Per-project roles come with Professional and above. On Enterprise and in the Trial, groups grant a whole team a role on the projects it needs, and identity-provider groups can be mapped to them in the SSO configuration. Project membership and grants are managed from each project's Members tab and from Settings, so access stays precise rather than all-or-nothing as the number of projects and people grows.

Key Capabilities

A different role per project for the same person, from Professional

Members tab on every project shows each member’s project role and how it was granted

Groups grant a team a role on projects (Enterprise and Trial)

Identity-provider groups can be mapped to platform groups in the SSO configuration

Project roles override the global role inside that project

One account per person, however many projects they work on

How It Works

1
Open a project, go to Members and add a person by email with a role
2
Change or remove a member’s project role at any time
3
On Enterprise or Trial, create a group under Settings → Access & Identity → Groups
4
Add members and grant the group a role on the projects it needs
5
Optionally map an identity-provider group to it through SSO

Available on

professional Plan & Above

Upgrade to the professional plan to unlock this feature.

Start Free Trial View Pricing

Available on Professional plan and above

See pricing →