Skip to main content

User permissions

ComInd's permission system controls who can access and modify data within your workspace through a combination of roles, groups, and granular access controls.

Workspace roles

Each workspace includes three predefined roles:

  • Workspace admin: full administrative access to the workspace
  • Workspace user: standard user access with configurable permissions
  • Inactive workspace user: restricted access for users who no longer actively participate

Permission groups

For more advanced permission scenarios, you can use groups to organize users:

  • Global groups (METAMETA): created by system administrators and available across all workspaces
  • Workspace groups: managed by workspace administrators and specific to the current workspace

Data access permissions

App-level access

Users need permission to view and interact with specific applications within the workspace.

Record-level permissions

Access to individual records can be:

  • Predefined: set by default rules when records are created
  • Dynamic: updated on a per-record basis as needed

Field-level visibility

Specific fields within records can be hidden from certain users or groups, providing granular control over sensitive information.

Action permissions

Preconditions

Users can only see and perform actions they're authorized to execute. Unauthorized actions are automatically hidden from the interface.

Data consistency rules

Post-conditions ensure data integrity by preventing certain changes to records, which users often perceive as permission restrictions.