Skip to content

Permissions matrix

This is the exhaustive permissions reference for every system-defined role in Plane.

For conceptual background, see Roles and permissions. For the role catalog, see Member roles.

Plane has two sets of roles: workspace roles that control what someone can do across the entire workspace, and project roles that control what they can do inside a specific project. A person's project role is independent of their workspace role — you can be a workspace Member but a project Admin.

Symbols used on this page

  • ✓ - Permitted for any item
  • Own - Permitted only on items the user created (creator condition)
  • Lead - Permitted only when the user holds the Lead designation in that teamspace
  • — - Not permitted
  • * - All actions permitted (wildcard grant in permission scheme)

Workspace permissions

Owner and Admin bypass: Workspace Owners have unconditional full access. Workspace Admins have full access to all workspace resources and all project resources — without needing project membership.

Workspace settings

PermissionOwnerAdminMemberGuest
View workspace settings
Edit workspace settings
Delete workspace
Transfer ownership

Workspace members

PermissionOwnerAdminMemberGuest
View member list
Invite by email
Import members (CSV / SSO)
Change a member's role
Assign Owner role
Assign Admin role
Remove a member

Custom Roles

Custom roles are workspace-defined role definitions extending the base system roles.

PermissionOwnerAdminMemberGuest
View custom roles
Create a custom role
Edit a custom role
Delete a custom role

Projects (Workspace-level management)

This covers project creation, discovery, and admin operations from the workspace level. For content access inside a project, see Project permissions.

PermissionOwnerAdminMemberGuest
Browse / list all projects
Create a project
Self-join a public project
Self-join a private project
Edit project settings
Archive a project
Delete a project
Publish project (make public)

Workspace Owners and Admins have full access to all project content without needing explicit project membership.

Auto-join project role mapping (when a workspace member self-joins a project):

Workspace roleProject role assigned
OwnerAdmin
AdminAdmin
MemberContributor
Guest— (cannot self-join)
Custom roleContributor

Initiatives

PermissionOwnerAdminMemberGuest
View initiatives
Create
Edit
Delete
React
Add / remove epics
Add / remove projects in scope
Drag and drop (reorder)
PermissionOwnerAdminMemberGuest
View links
Add a link
Edit a link
Delete a link

Initiative attachments

PermissionOwnerAdminMemberGuest
View
Add attachment
Edit attachment
Delete any attachment

Initiative comments

PermissionOwnerAdminMemberGuest
View comments
Create a comment
Edit own commentOwn
Delete own commentOwn
Delete any comment
React to a comment

Initiative updates

PermissionOwnerAdminMemberGuest
View updates
Create an update
Edit an update
Delete an update
React to an update
Comment on an update
Edit own update comment
Delete own update comment
React to an update comment

Members can react and comment on initiative updates but cannot edit or delete those comments.

Teamspaces (Workspace-level management)

This covers workspace-admin operations over teamspaces. For actions taken by teamspace members inside a teamspace, see Teamspace permissions.

PermissionOwnerAdminMemberGuest
Browse / list teamspaces
Create a teamspace
View a teamspaceMembers only¹
Edit teamspace settings
Delete a teamspace
Add members to teamspace
Remove members from teamspace
Assign Lead designation
Link a project to teamspace
Unlink a project from teamspace

¹ Workspace Members must be explicit teamspace members to view a teamspace's content. Owners and Admins bypass this.

Wiki

PermissionOwnerAdminMemberGuest
View a page
Create a page
Edit page content / title
Lock / unlock a page
Make page public / private
Share a page
Archive a page
Restore a page
Duplicate a page
Delete a page
Move a page
Update page icon / logo
Export / download
Favourite a page
Comment on a page

Commenting on workspace pages requires Owner or Admin.

Wiki Collections

PermissionOwnerAdminMemberGuest
View collections
Create a collection
Edit own collectionOwn
Edit any collection
Delete own collectionOwn
Delete any collection

Workspace Views

PermissionOwnerAdminMemberGuest
View all workspace views✓¹
Create a view
Edit own viewOwn
Edit any view
Delete own viewOwn
Delete any view
Share / make public
Publish externally
Export
Favourite / pin

¹ Guests can view workspace views but only see work items from projects they have explicit access to.

Workspace Drafts

PermissionOwnerAdminMemberGuest
View drafts
Create a draft
Edit a draft
Delete own draftOwn
Delete any draft
Duplicate a draft
Move draft to a project
Manage drafts (bulk operations)

Releases

PermissionOwnerAdminMemberGuest
View releases
Create a release
Edit a release
Delete a release
Add work items to a release
Remove work items from a release
Add / edit / delete links
Add attachment
Delete attachment
Edit changelog
Manage tags
Add a comment
Edit own comment
Delete own comment
React to a comment
View activity

Customers

PermissionOwnerAdminMemberGuest
View customers
Create a customer
Edit a customer
Delete a customer
Add attachment
Delete attachment

Workspace Analytics

PermissionOwnerAdminMemberGuest
View
Export
Apply filters

Dashboards

PermissionOwnerAdminMemberGuest
View dashboards
Create a dashboard
Edit a dashboard (rename, settings)
Delete a dashboard
Add a widget
Edit a widget
Delete a widget
Rearrange widgets
Apply quick filters (view only)
Favourite a dashboard

Worklogs

PermissionOwnerAdminMemberGuest
View
Export

Workspace Activity Logs

Audit trail of all changes made across the workspace.

PermissionOwnerAdminMemberGuest
View workspace activity
Export workspace activity

User Activity Logs

Per-member activity history showing what a specific workspace member has done.

PermissionOwnerAdminMemberGuest
View user activity
Export user activity

Workspace Automations

PermissionOwnerAdminMemberGuest
View
Create
Edit
Enable / disable
Delete

Workspace Assets

Files and images uploaded at workspace scope (logos, avatars, rich-text embeds not tied to a specific project).

PermissionOwnerAdminMemberGuest
View / download
Upload
Edit
Delete
Manage (bulk)

Workspace Project States

Workspace-level project status definitions used for project grouping (Enterprise).

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Workspace Features

Controls for toggling workspace-level features on or off.

PermissionOwnerAdminMemberGuest
View feature settings
Enable / disable features

Workspace Work Item Types

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Workspace Custom Properties

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Custom Relations

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Favorites

PermissionOwnerAdminMemberGuest
View own favorites
Add a favorite
Edit (rename) a favorite
Remove a favorite

Integrations

Third-party integration connections (GitHub, Slack, Jira, Linear, etc.).

PermissionOwnerAdminMemberGuest
View integrations
Connect an integration
Configure an integration
Disconnect an integration
Admin-only operations (manage)
Create integration
Delete integration

Webhooks

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Workspace API Tokens

PermissionOwnerAdminMemberGuest
View
Create
Delete

Billing

PermissionOwnerAdminMemberGuest
View billing
Manage billing

Plane AI

PermissionOwnerAdminMemberGuest
Use AI features

Work Item Templates

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Page Templates

PermissionOwnerAdminMemberGuest
View
Create
Edit
Delete

Project Templates

PermissionOwnerAdminMemberGuest
View
Use to create a project
Publish
Create
Edit
Delete

Project permissions

Workspace Owner / Admin bypass: Workspace Owners and Admins have full access to all content in every project in their workspace without holding explicit project membership.

Project Settings

PermissionAdminContributorCommenterGuest
View project settings
Edit project settings
Archive project
Restore project
Delete project
Publish project (make public)

Project Members

PermissionAdminContributorCommenterGuest
View member list
Invite by email
Invite existing workspace member
Change a member's role
Remove a member
Leave project

Work Items

Core actions

PermissionAdminContributorCommenterGuestNotes
View work itemsOwnGuest: own intake submissions only
Create a work item
Edit a work itemOwnOwnBlocked on archived items
Delete a work itemOwnOwnOwn
Bulk edit
Assign to a user
Duplicate a work item
Archive a work item
Restore from archive
Export work items
Import work items
Move to another project✓¹¹ Requires Contributor on both projects
Mark as draft
React
Subscribe / unsubscribeOwnTied to edit permission
Vote

Property changes (all require edit permission)

PropertyAdminContributorCommenterGuest
State
Priority
Assignees
Labels
Work item type
Parent (sub-task of)
Start date
Due date
Estimate
Cycle
Module
Milestone
Drag and drop / reorder
Restore description version

Conversion and structure

PermissionAdminContributorCommenterGuestNotes
Add sub-work itemBlocked on archived items
Convert to epicBlocked on archived items
Convert to sub-task
Switch work item typeBlocked on archived items

Work Item Relations

PermissionAdminContributorCommenterGuestNotes
Add relation
Edit a relation
Remove a relation
View relations
PermissionAdminContributorCommenterGuestNotes
Add a link
Edit a link
Delete a link
View links

Work Item Attachments

PermissionAdminContributorCommenterGuestNotes
View attachments
Add attachmentCommenter: upload only
Edit own attachmentOwn
Delete own attachmentOwn
Delete any attachmentAdmin only

Worklogs

PermissionAdminContributorCommenterGuestNotes
Log work (add work log)Blocked on intake work items
Edit own work logOwn
Delete own work logOwn

Comments

PermissionAdminContributorCommenterGuestNotes
Create commentBlocked on archived work items
Edit own commentOwnOwnBlocked on archived work items
Delete own commentOwnOwnNot blocked by archived status
Delete any commentAdmin only
React to comment
Resolve a comment

Epics

Core actions

PermissionAdminContributorCommenterGuestNotes
View epics
Create an epic
Edit an epicBlocked on archived items
Delete an epicOwn
Archive / restore
Duplicate
Export
React
Subscribe / unsubscribe
Convert to work item
Add sub-work items
Add / remove relations
PermissionAdminContributorCommenterGuest
View links
Add a link
Edit a link
Delete a link

Epic Custom Properties

PermissionAdminContributorCommenterGuest
View custom properties
Edit property values
Create / delete epic property definitions

Epic Updates

PermissionAdminContributorCommenterGuest
View updates
Create an update
Edit own updateOwn
Delete own updateOwn
React to an update
Comment on an update
Edit own commentOwn
Delete own commentOwn
React to a comment

Project Updates

PermissionAdminContributorCommenterGuest
View updates
Create an update
Edit own updateOwn
Delete own updateOwn
React to an update
Comment on an update
Edit own commentOwn
Delete own commentOwn
React to a comment

Cycles

PermissionAdminContributorCommenterGuest
View cycles
Create a cycle
Edit a cycle
Archive a cycle
Restore (unarchive)
Delete a cycleOwn
Manage cycle (admin operations)
Add work items to cycle
Remove work items from cycle
Transfer work items to next cycle
Edit cycle filters
Export cycle
Favourite a cycle

Modules

PermissionAdminContributorCommenterGuest
View modules
Create a module
Edit a module
Archive a module
Restore (unarchive)
Delete a moduleOwn
Manage module (admin operations)
Add work items to module
Remove work items from module
Add members to module
Remove members from module
Export module

Milestones

PermissionAdminContributorCommenterGuest
View milestones
Create a milestone
Edit a milestone
Delete a milestone
Add work items to milestone
Remove work items from milestone

Intake

PermissionAdminContributorCommenterGuestNotes
Submit a new intake itemAll roles can submit
View all submissionsOwnGuest: own only
Edit own submissionOwnOwnOwn
Delete own submissionOwnOwnOwn
Add attachment to own submissionOwnOwnOwn
Accept a submissionOnly while in actionable status
Decline a submissionOnly while in actionable status
Snooze a submission
Mark as duplicate
Mark as spam
React to a submission
Comment on a submission
Export intake
Configure intake settings
Manage intake

Pages

PermissionAdminContributorCommenterGuestNotes
View a pagePublic pages viewable without role check
Create a page
Edit page content / titleBlocked if archived or locked
Lock a page
Unlock a page
Archive a page
Restore (unarchive)
Delete a pageAdmin only
Duplicate a page
Make page public / private
Share page (publish link)OwnContributor: own pages only
Update page icon / logo
Move a page (reparent)
Favourite a page
Add comment on pageUses page edit permission
Export / downloadAnyone who can view

Views

PermissionAdminContributorCommenterGuestNotes
View all views
Create a view
Edit own viewOwn
Edit any viewAdmin only
Delete own viewOwn
Delete any viewAdmin only
Share / make publicOwn
Publish externallyOwn
Export
Favourite / pinPersonal favourite
Configure views (admin)

States

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete
Reorder
Mark as default

Labels

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete
Reorder

Estimates

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete

Workflows

PermissionAdminContributorCommenterGuest
View
Create / edit / delete
Manage

Automations

PermissionAdminContributorCommenterGuest
View automations
Create
Edit
Enable / disable
Delete
View run history

Recurring Work Items

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete

Work Item Types and Custom Properties

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete

Work Item Templates

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete

Page Templates

PermissionAdminContributorCommenterGuest
View
Create
Edit
Delete

Project Analytics

PermissionAdminContributorCommenterGuest
View
Export
PermissionAdminContributorCommenterGuest
View
Add a link
Edit a link
Delete a link

Project Assets

Files and images uploaded within project scope — includes images embedded in pages or comments, and project-scoped uploads. Commenters can upload because they need to embed images in comments.

PermissionAdminContributorCommenterGuest
View / download
Upload
Edit own uploadOwnOwn
Delete own uploadOwnOwn
Delete any upload

Project Activity Logs

Audit trail for all changes within the project.

PermissionAdminContributorCommenterGuest
View project activity

Project Member Activity

Per-member activity scoped to this project — who changed what.

PermissionAdminContributorCommenterGuest
View member activity

Teamspace Permissions

Workspace Owners and Admins have full access to all teamspace content without being teamspace members — they effectively hold wildcard grants on all teamspace resources.
Workspace Guests cannot be added to teamspaces.

The tables below apply to users who are explicit teamspace members. Lead is a designation (condition), not a separate role level.

Teamspace management (within a Teamspace)

PermissionMemberLead
View teamspace
Edit teamspace settings (name, logo, description)
Delete teamspace
Manage teamspace
Add members
Remove members
Assign Lead designation
Link a project to teamspace
Unlink a project from teamspace
Create a work item in teamspace context

Teamspace entity comments

Comments posted directly on the teamspace entity (not on a page or view within it).

PermissionMemberLeadNotes
View commentsAlso: Workspace Owner / Admin
Create a comment
Edit own commentOwnOwn
Delete own commentOwnOwn
Delete any commentWorkspace Owner / Admin only
React to a comment

Teamspace Views

PermissionMemberLead
View all teamspace views
Create a view
Edit own viewOwnOwn
Edit any view
Delete own viewOwnOwn
Delete any view
Favourite / pin a view

Teamspace Pages

PermissionMemberLeadNotes
View a pagePrivate pages: owner + shared-access users only
Create a page
Edit page content / titleBlocked if archived or locked
Lock a page
Unlock a page
Duplicate a page
Move a page (reparent)
Update page icon / logo
Archive a pageOwnMember: own pages only
Restore (unarchive)Own
Delete a pageOwnMember: own pages only
Export / download
Favourite a page
Make page public / privateNot supported for teamspace pages

Making a teamspace page public or private is hardcoded off — it is not a role restriction, the feature simply does not exist for teamspace pages.

Teamspace Page Comments

PermissionMemberLead
Create a comment
Edit own comment
Delete own comment
Delete any comment
React to a comment
Resolve a comment

See also