Skip to content

Permissions matrix

This table shows what each organisation role can do. It reflects both what the workspaces offer and what the database allows. App access applies on top: apart from Admins, everyone sees only the apps they’ve been granted.

Legend: βœ… yes Β· πŸ”Έ limited (see note) Β· β€” no

Roles: Adm Admin Β· PM Product Manager Β· Dev Developer Β· Tst Tester Β· UID UI Designer Β· Cli Client Β· Vwr Viewer

Capability Adm PM Dev Tst UID Cli Vwr
Add, edit, revoke, restore, delete members βœ… β€” β€” β€” β€” β€” β€”
Assign roles, app access, tester groups βœ… β€” β€” β€” β€” β€” β€”
See all apps without being granted βœ… β€” β€” β€” β€” β€” β€”
Read the audit log; delete aged entries βœ… β€” β€” β€” β€” β€” β€”
Manage approval rules βœ… β€” β€” β€” β€” β€” β€”
Capability Adm PM Dev Tst UID Cli Vwr
Create, edit, delete apps, tester groups, modules, submodules βœ… β€” β€” β€” β€” β€” β€”
Create, edit, delete tasks; assign developer and groups βœ… β€” β€” β€” β€” β€” β€”
Bulk import βœ… β€” β€” β€” β€” β€” β€”
Edit planning fields and dependencies βœ… β€” β€” β€” β€” β€” β€”
Browse the hierarchy tree and Kanban board βœ… β€” β€” β€” β€” β€” β€”
Capability Adm PM Dev Tst UID Cli Vwr
See assigned tasks βœ… all β€” πŸ”ΈΒΉ πŸ”ΈΒ² β€” β€” β€”
Change a task’s workflow stage πŸ”ΈΒ³ β€” πŸ”Έβ΄ β€” β€” β€” β€”
Cascade a stage to children (apps, modules, submodules) βœ… β€” β€” β€” β€” β€” β€”
Reassign work βœ… β€” β€” β€” β€” β€” β€”
Capability Adm PM Dev Tst UID Cli Vwr
Start and submit QA runs βœ… β€” β€” πŸ”ΈΒ² β€” β€” β€”
View all QA runs and evidence βœ… β€” β€” own β€” β€” β€”
Set device defaults β€” β€” β€” βœ… β€” β€” β€”
Submit task requests β€” β€” πŸ”Έβ΅ βœ… β€” β€” β€”
Review task requests (publish, merge, review, reject) βœ… β€” β€” β€” β€” β€” β€”
Update issue status and internal notes β€” β€” πŸ”ΈΒΉ β€” β€” β€” β€”
View feedback history βœ… β€” πŸ”ΈΒΉ own β€” β€” β€”
Capability Adm PM Dev Tst UID Cli Vwr
View the release board and readiness βœ… βœ… β€” β€” βœ… βœ… βœ…
Decide Admin, Security, Compliance approvals βœ… β€” β€” β€” β€” β€” β€”
Decide Client approvals βœ… β€” β€” β€” β€” πŸ”ΈβΆ β€”
Decide Product Manager approvals βœ… πŸ”ΈβΆ β€” β€” β€” β€” β€”
Decide Developer approvals βœ… β€” πŸ”Έβ· β€” β€” β€” β€”
Decide QA approvals (normally recorded from QA runs) βœ… β€” β€” πŸ”Έβ· β€” β€” β€”
Send issue reports and suggestions β€” β€” β€” βœ… β€” β€” β€”
Promote to Production (with or without override) βœ… β€” β€” β€” β€” β€” β€”
Capability Adm PM Dev Tst UID Cli Vwr
Read and post comments on accessible items βœ… βœ… πŸ”ΈβΈ πŸ”ΈβΈ βœ… βœ… πŸ”ΈβΉ
Read status history and activity timelines βœ… βœ… β€” β€” βœ… βœ… βœ…
Own notification inbox and preferences βœ… βœ… βœ… βœ… βœ… βœ… βœ…
See other members’ notifications βœ… β€” β€” β€” β€” β€” β€”
Organisation-wide analytics βœ… β€” β€” β€” β€” β€” β€”
Portfolio, roadmap and release analytics (own apps) βœ… βœ… β€” β€” βœ… βœ… βœ…
Personal delivery analytics β€” β€” βœ… β€” β€” β€” β€”
Personal QA analytics β€” β€” β€” βœ… β€” β€” β€”
  1. Developers see tasks where they are the assigned developer, in apps they can access, and the feedback on those tasks.
  2. Testers see and run QA on tasks that are in Staging, assigned to one of their tester groups, in apps they can access.
  3. Admins can set any stage except Production (reached only by promotion). Moving to Ready to Ship requires a passed QA result.
  4. Developers can move their own tasks: Backlog β†’ Planned β†’ In Progress β†’ In Review β†’ Staging, In Review β†’ In Progress, and Staging β†’ In Progress.
  5. Developers create task requests only by escalating a tester’s suggestion, once per suggestion.
  6. Product Managers decide Product Manager Approved, and Clients Client Approved, on items in Ready to Ship or Production in apps they can access.
  7. Permitted by the database (Developers on tasks only, and not their own task unless the rule allows self-approval), but the Developer and Tester workspaces don’t include the release board. QA Approved is recorded automatically when a tester submits a QA run.
  8. Permitted for items Developers and Testers can access, but their workspaces don’t show a comments panel yet.
  9. The Viewer workspace is intended to be read-only, but the comments panel on release candidates is available to Viewers.

Super Admin is a QA Sync platform role, not an organisation role, and doesn’t appear in this table. See Organisations and tenancy.