New: the AI firewall watches the whole platform and explains each incident in plain words. See how it works

Reply To: 2.0.1: custom access groups, and admins can rename the workspace

No, groups only add. A member’s rights are the role plus every active group, and nothing in a group subtracts.

To hold someone back from what their role allows, use an access policy with a deny. A deny always wins over the matrix. Policies need the Owner role to set up: Access policies. If it’s a whole role you want changed (no User in your organisation may acknowledge), unticking that cell for User in the Access Rights matrix is simpler.

♥ 0