Feature-Based Permissions (Beta)

Your workspace uses feature-based permissions. Instead of assigning each person a role, you grant them the only specific permissions they need. You can change those permissions at any time.

Only members with Manage workspace members and permissions can see and edit other members’ permissions.

Permissions are organized into groups that match areas of the product. Each group holds a list of individual permissions you turn on or off for one member at a time.

Three things shape what you see on the permissions screen:

• Your workspace type. Buyer and Vendor workspaces have different groups, because they do different things. Buyer workspaces pay out to vendors and contractors; Vendor workspaces send invoices and get paid.

• The features your workspace uses. Manage Projects appears only when your workspace has projects, and a few individual permissions appear only when the feature they control is turned on.

• Related permissions. Some permissions don’t work on their own, so granting them grants the permission they depend on. See the section “Permissions that come together” for more details.

Every member also gets a baseline that isn’t shown as a toggle: they can sign in, see the workspace, view projects, and accept future invitations.

Some permissions need a view permission to be usable, because the action lives on a page that view permission unlocks. When you grant one of these, the view permission is granted at the same time:

• Any permission in Create Payouts, Approve Payouts, or Pay Payouts also grants View payouts.

• Manage project funds, Create funding invoices, Apply deposits to funding invoices, and Request withdrawals by email also grant View balance & transaction history.

• Manage workspace members and permissions also grants View members.

This works one way. Turning a permission off later doesn’t remove the view permission it brought along (clear that permission separately if you want it gone).

1. Go to Settings > Team.

2. Find the member you want to change, and then click Edit permissions.

3. Select the permissions you want the member to have, and clear the ones you want to remove.

4. Click Save.

1. Go to Settings > Team, and then click Add members.

2. Enter the email address of the person you want to invite.

3. Select the permissions they should have. The General group is selected for you; add and clear permissions to fit the person’s role on your team.

4. Click Send invites.

Every invitation needs at least one permission, so you can’t send an invitation with everything cleared.

• Someone always has to be able to manage members. You can’t remove the last Manage workspace members and permissions permission in the workspace. If you try to save that change, you’ll see the error “You need at least one user with workspace management permissions.” Grant the permission to another member first, and then remove it from the original member.

• Every invitation needs at least one permission. A member with no permissions wouldn’t be able to do anything in the workspace.

• Existing specialized access is preserved. If a member has access that was granted outside the permissions screen, such as Lumanu banking access, saving their permissions keeps it.

• You can grant permissions you don’t have yourself. Someone who manages your team doesn’t need payout access to set up a person who has it. Having Manage workspace members and permissions is enough.

When this feature is enabled all roles will be automatically mapped to the permissions. For a clear understand of how this will work please refer to the table below.

Can I turn on feature-based permissions for my workspace?

Not yet. Feature-based permissions is in beta and we’re enabling it workspace by workspace. You’ll see the new permissions screen automatically once your workspace is included.

Do I have to migrate my team all at once?

No. Members keep their existing access until you edit their permissions. Editing one member doesn’t affect anyone else.

What happened to roles like Workspace Manager and Payment Approver?

Roles are no longer assigned in workspaces on the new model. What each role granted is now available as individual permissions, so you can grant the same access, more, or less. Members you haven’t edited yet still get their access from their old role.

Can I copy one member’s permissions to another?

Not yet. Set each member’s permissions on their own edit screen.

Why don’t I see a group that this article lists?

Groups depend on whether you’re a Buyer or a Vendor workspace and on the features your workspace uses. Manage Projects appears only when your workspace has projects, Add and remove team members from projects appears only when project member management is turned on, and Manage project funds appears only when project cash balances are turned on. Labels can vary too: in workspaces without scheduled payments, Pay or schedule payouts reads Use balance to pay payout.