Team · Access rules
Access rules
How to allow or deny actions on records by their attributes on top of roles, and check why someone has access.
When you need rules
Roles are enough when access depends on the job. Rules are for when it depends on the record itself:
- a client sees and comments on one task list and nothing else;
- nobody but an administrator changes closed deals;
- an intern does not see deals in the "Wholesale" stage set.
Creating a rule
Settings → Access rules → New access rule (administrators only):
How access is decided
- If any Denies rule matches, there is no access.
- If the role allows it, there is access.
- If an Allows rule matches, there is access.
- Otherwise there is none.
Until you add rules, only roles apply. You can comment only on a record you can see. Rules apply the same way in tables, on boards, on record pages, in the API and for the assistant.
Check access
The Check access button on the Access rules page or on a person's card in Team: pick a person, a type and a record to see whether they can view, change and comment, and why: the role grants it, or a particular rule allowed or denied it.