How to manage workspace role permissions

Besides giving global permissions to the portal, you can grant specific permissions to a workspace. 

Permission states

There are three states of each permission.

Checkmark — Access is granted

X mark — Access is denied

Shield — Access is not granted but also not denied

This type of permission is useful when a certain user belongs to several workspace roles. If according to one role, the permission is in the Shield state, and according to another role the permission is in the Checkmark (Access granted) state, the user will have the permission in the Checkmark (Access granted) state as the result, as permissions of all roles are summarized.  

Permission types

Workspace access

This permission allows users to see the workspace.

Without it, other workspace permissions can not be granted.

Create project

Users can create translation projects with this permission. 

Access all projects 

All users can access the projects they create. To view projects created by others, the Access all projects permission must be granted.

Access all content

All users have access to the content they ordered for translation. To see the content other users ordered, Access all content permission must be granted. 

Access settings

This permission gives the ability to provide the related workspace settings permissions.

It also gives users the ability to view the workspace settings in the reading mode. 

Modify settings

Grants users the ability to modify workspace settings. With the Modify Settings permission, users can adjust settings in the Details tab of the workspace settings.

However, modifying services and workflows requires additional permissions unless the user is a workflow owner or service owner.

Important: If a user creates a workflow or service, they automatically become the Workflow Owner or Service Owner, respectively, and can modify their workflows and services regardless of the Modify Settings permission. You can view the owner of a service or workflow in the respective settings.

Create service

Grants users permission to create services. Users have permission to services they created by default. 

Create workflow

Grants users permission to create workflows. Users have permission to workflows they created by default. 

Manage access

Gives the ability to view the roles. If Modify settings permission is also granted, you can create roles and modify permissions. However, you can not give more permission than you have to other roles or your role.  

Project target languages

Enable necessary languages. Users will be able to create projects only with these languages even if more languages are enabled in the service settings and in Workspace languages. 

Domains

If you have multiple domains and want to grant access to specific ones, enable this mode in Access all domains and select the desired domains using the switcher. Users without access to a particular domain won't be able to create projects for it.

If you want to grant access to all domains, enable the access granted mode in Access all domains.

Cost Centers

When creating a translation project, users can assign it to a specific department (Cost Center).

If you have multiple Cost Centers and want to grant access to specific ones, enable this mode  in Access all cost centers and select the desired cost center using the switcher. Users without access to a particular cost center won't be able to create projects for it.

If you want to grant access to all cost centers, enable the access granted mode in Access all cost centers.

Services

When the Access toggle is activated, users can create translation projects using enabled services and view them in read-only mode. Without this toggle enabled, even service owners cannot create projects with those services.

When the Modify toggle is activated, users can make changes to the enabled services.

If Modify settings permission is not granted, you will not even see the Modify toggle.  

Workflows

Workflows do not contain security-sensitive data. Therefore, there's no specific permission to view the workflows in the reading mode and create services with the workflows. You need only the Access settings permission for that. 

To edit workflows, the Modify toggle should be enabled. If you don't see the Modify toggle, check if the Modify settings permission is granted. 

Workflow Owner can modify the workflow he/she created disregarding the Modify permission and Modify settings permission.   

Each workflow contains steps and transitions between different steps. 

You can grant or deny access to all steps and their transitions. To grant access only to some transitions, use the Shield state in the Steps column and enable the necessary transitions in the Transitions column.

If a specific transition is enabled, a user can use this transition to move the project to this certain step.

So, if you need only some users to be able to start translation, for example, or mark projects as completed, you should give them access to the corresponding transitions and deny access to other users to these transitions.