Project access model

Allure TestOps uses two different access layers:

1. Global roles decide what a person can do in the instance as a whole.
2. Project access decides what they can do inside a particular project.

Instance-wide roles

• Administrator can view and edit all projects, manage other accounts, and change global instance settings that affect how projects operate.
• User can work in projects and create their own projects.
• Guest can only view the projects they were invited to.

Project access levels

• Read for viewing project data.
• Write for working with project data.
• Owner for project administration and access changes.

Why this distinction matters

• Inviting a person to the instance is not the same as adding them to a project.
• A person can exist in the instance without having access to every project.
• Group-based access is often easier to maintain than person-by-person changes.

Related pages

• Invite users to the instance
• Manage groups
• Project access and visibility