Concepts
Access and roles
Who can do what in a project.
Access is controlled per project. A user can have different roles in different projects.
| Role | Can do |
|---|---|
| Admin | Everything a manager can, plus: manage access, the Git integration and the encryption key, and delete the project. |
| Manager | Read and edit the project's content: versions, files, tags and other project content. |
The project owner always keeps the admin role.
Managing access
Project admins add and remove users in Project settings → Access. A user is found by email and must already have an account.
API tokens
A personal API token has exactly the permissions of the user who created it. There are no separate scopes. Even so, the public API is deliberately limited: a token cannot delete or create projects, change roles, regenerate the encryption key, or change the Git integration, encryption flags or validation settings.