Resource Access Window (UI guide)

The Access window is where you see and manage who can do what on a resource. When opened, it shows exactly what principals (Users, Teams) have access on this specific resource. It provides full transparency: if someone has access, it shows up in the window.

Full Transparency: The Resource Access Window provides complete visibility into who has access to what. Every user and team with access is listed, making it easy to audit and understand permissions.

Permission sections

Resource Access Window showing the three permission sections: Inherited, Direct, and Child Resource Permissions
Resource Access Window Overview

The permissions are split into 3 sections:

  1. Inherited Permissions - Permissions inherited from parent resources

  2. Direct Permissions - Permissions granted directly on this resource

  3. Child Resource Permissions - Permissions that apply to this resource's children

Understanding the three permission sections

Inherited Permissions:

  • Show permissions that flow down from parent resources

  • Cannot be edited at this level

  • Must be changed at the parent or overridden with Direct Deny

Direct Permissions:

  • Permissions granted directly on this specific resource

  • Can be set to Allow (✔), Neutral (•), or Deny (✖)

  • Deny overrides inherited Allow permissions

Child Resource Permissions:

  • Permissions that will inherit down to this resource's children

  • Useful for granting project-wide access to analyses

  • admin here only applies to children, not the parent

Pages in this section

Last updated