Manage user roles for your organization

As the Org Admin, you can create and modify user roles for people in your organization. There are two types of user roles you'll be managing - organization-level user roles and project-level user roles.

Organization-level user roles

Organization-level user roles are how you will manage most of your organization's permissions in Aconex.

These permission settings apply to:

everyone in your organization,
who has been assigned this user role
for every project they are working on.

Keep in mind, project-level Grant or Deny settings can change organization-level permissions for a specific project, unless the organization-level setting is Deny. We'll explain in the next section.

Setting option	What it does
Grant	Gives permission to this function.
Deny	Prevents access to this function. This setting cannot be overridden by a project-level user role. Also, if a user has a number of roles, and Deny is set for one of them, that will prevent them from using the functionality even if it's enabled for another role that's applied to them. In most cases, we recommend using N/A instead.
N/A	N/A can be overridden by another user role. N/A is assigned by default. And by default, N/A does not grant permission to the function, so it can be considered 'not assigned'.

Tip!

User roles for your organization apply to every project your organization is involved with.

More information about organization-level user roles

The five default user roles

User role secured asset definitions

Add or remove someone from a user role

Project-level user roles

If you need to change a user’s permissions for one specific project, create a user role at the project-level.

Project-level Grant or Deny settings can override organization-level settings for a specific project. However, an organization-level Deny cannot be overridden.

Project-level N/A means no permission is assigned at the project level, so the organization-level setting still applies unless another role grants or denies access.

Setting option	What it does
Grant	Gives permission to anyone in your organization for this project. Overrides any setting at the organization-level. But only for this project.
Deny	Denies access to anyone in your organization for this project. Overrides any setting at the organization-level except the Deny setting, but only overrides them for this project.
N/A	This setting can be modified by another user role. N/A is assigned by default. And by default, N/A does not grant permission to the function, so it can be considered 'not assigned'.