Understand roles and permissions
A role is a set of permissions. Permissions decide which information someone can see and which actions they can take. Role names can be customized, so the same name should not be assumed to mean the same access in every workspace.
Understand the three everyday scopes
| Scope | Web label | What it covers |
|---|---|---|
| Workspace | Application Roles | Workspace-wide access and core capabilities. |
| Project | Project Roles | Access and actions for a specific project. |
| Organization | Organization Roles | Access associated with a particular organization and its assignments. |
Platform administration is a separate level intended for Bridge platform administrators. It is not an ordinary project role.
A person can receive access from more than one assignment. For example, a project may list both direct members and people with organization-based access.
For a workspace administrator
On the web, open Roles & Permissions under settings. Choose the role scope you want to review.
Before assigning or changing a role:
- Identify the project, organization, or workspace the access should cover.
- Check what the role allows people to read, create, update, delete, or manage.
- Assign only the capabilities needed for that work.
- Check the member's other assignments if you are trying to reduce access.
- Review the result using the member's own account.
Changes to a shared role can affect everyone assigned that role. If one person needs a different level of access, consider the appropriate role or assignment rather than changing a widely used role without reviewing its members.
For someone using the app
You may see a read-only view, a missing action, or fewer tools than a coworker. This can be expected behavior.
Check:
- The active workspace.
- Whether you have the necessary project or organization assignment.
- The permissions in your assigned role.
- Whether the workspace has enabled the feature.
Ask an administrator about the particular action you need, such as viewing documents or adding a project member. This is more useful than asking for unrestricted access.
Additional security and access changes
Some roles require a password or passkey check in addition to phone verification. A new prompt can appear after a role change or when entering another workspace.
Offline use follows the information and authorized scope already saved on the device. When Bridge reconnects, it checks current access again. Work that is no longer allowed can require attention, and previously accessible content may no longer be available.
Do not use offline mode as a way to retain or bypass removed access.