Permissions

What someone can do in Thicket depends on two things: their user type (owner, admin, member, collaborator or client) and the projects they're on. This article covers both, plus the optional restrictions owners and admins can turn on. To change someone's type, see Changing User Types.

Team Members

Team members, shown as Member, can:

• Work in every project that's open to everyone on the team, and in every invite-only project they're on
• Post, comment, and create to-dos, docs, files, events and cards in those projects
• Create projects, and use and create templates
• Add people who are already in the account to projects they're on, and take them off
• Change a project's name, description and tools, and whether it's open to everyone
• Archive or delete projects they created
• Move, archive and delete content, and share items with public links
• Open Admin to see who the account's owners and admins are

Team members can't invite new people, change anyone's user type, or remove people from the account.

Outside Collaborators

Outside collaborators, shown as Collaborator, are people from outside your company, such as contractors and partners. In the projects they're added to, they can do what a team member does: see everything, post, comment, create to-dos, docs, files, events and cards, move and archive content, and share items with public links, as your permission settings allow. They can be in groups, and they can log time.

Collaborators can't:

• Create projects or templates, or use templates
• Add people to a project or take anyone off it, though they can remove themselves
• Reach projects that are open to everyone on the team, unless they're added to one directly
• See people they don't share a project with, other than the owners and admins
• Be made an admin or owner

To keep collaborators talking only in a project's chat, turn private chats off for their company. See Turning Off Private Chats for a Company.

Admins

Admins can do everything team members can, plus:

• Invite people by email or with a link, and manage pending invitations
• Remove people from the account
• Change people between member, admin, collaborator and client
• Change which projects someone is on, and edit their job title, company and out-of-office dates
• Turn off two-factor authentication for someone who's locked out
• Manage companies and groups, and add or remove other admins
• Archive or delete any project they're on
• Change the account settings in Admin that aren't reserved for owners, such as the account logo, permissions, message categories, tool names, voice notes and chat history

Admins can't change or remove owners. They also don't get automatic access to invite-only projects: like everyone else, they see the projects they're on.

Owners

Owners can do everything admins can, plus:

• Make someone an owner, and change or remove other owners
• Manage billing and the plan, and rename the account
• Require two-factor authentication for everyone except clients
• Reassign someone's to-dos in bulk
• Add themselves to any project with Admin > Access any project
• See and unpublish every public link with Admin > Manage public items
• Restore anything from the account-wide trash
• Export the account's data, and cancel the account

See Account Owners and The Admin Area.

Clients

Clients work in the projects they're added to, and they only see the items your team shares with them. They can't create projects, invite people, add or remove people on a project, change a project's settings, use templates, or join groups, and they don't see Admin or Reports. See What Clients Can See and Do.

Project Access

A project is either open to everyone on the team or invite-only:

• An open project includes every team member, admin and owner.
• An invite-only project is visible only to the people on it, admins included.
• Clients are never included automatically. They only get into a project when someone adds them to it.

See Adding People to a Project.

Tightening Permissions

Out of the box, everyone on a project except clients can edit it, change who's on it, move and delete its content, and share public links. Owners and admins can narrow that in Admin > Permissions. Every switch is off until you turn it on, and each applies to the whole account:

• Restrict who can edit project details: only owners, admins and the project's creator can change a project's name, description and tools. Whether a project is open to everyone is always theirs alone to change, with or without this switch. Everyone else sees Project settings with those controls turned off and a note saying why.
• Restrict who can edit people on a project: only owners, admins and the project's creator can change who's on a project. Projects open to everyone aren't affected, and anyone can still remove themselves.
• Restrict who can move, archive, and delete content: only owners, admins and whoever created an item can move, archive or delete it. Anyone with access can still move cards between columns on the same board, including Done. Once others have commented on an item, only an owner or admin can archive or delete it.
• Restrict public links to owners and admins: only owners and admins can create public sharing links. See Sharing Items with Public Links.
• Limit editing and deleting comments and chats: everyone gets 15 minutes to edit or delete their own comments and chat lines. After that, only owners and admins can delete them, and nobody can edit them.

Turning Off Private Chats for a Company

Under Restrict who can start private chats, each company in your account has its own switch. Turn a company's switch off to keep its people talking in project chats instead of private ones. Their existing private conversations stay readable, but neither side can send new messages. For the people in that company, New chat disappears from the Chats page and from the Chats + Notifications panel, and the Chats page tells them private chats are off for their company. If you haven't set up any companies yet, the section links to Manage companies. See Companies and Groups and Group Chat and Direct Messages.

The switch applies to everyone in the company, owners and admins included, and there is no exception for administrators. When a company includes you or another owner or admin, its row says so, because switching it off takes private chats away from them too. Management usually gets its own company, so that contractors, outside collaborators or clients can be restricted without restricting the people who run the account.