Loading
PLATFORM
CAPABILITIES
ASANA AI
PLANS
Company Type
Teams
Industries
Use Cases
LEARN
SUPPORT
SERVICES
Help Center
search-icon

Topics

Understanding user role permissions

In This Article

Each user role has an inherent permissions, and a set of permissions that are configurable. Below is an overview of permissions categories and the available permissions that can be configured at the role level. The default columns indicate the default state of the permission if no changes have been made to the role or to global settings for the domain.

Related articles

Configurable permissions available to all roles (admin, member, guest)

Listed below are the current configurable permissions for admins, members, and guests in Asana.

Invite

Controls on the ability to invite users to the organization.

PermissionsDescriptionAdmin defaultMember defaultGuest default
Invite guestsControl who can invite guest users to the organization for security and compliance purposes.✅ On - can invite guests✅ On - can invite guests✅ On - can invite guests
Restrict guest* invites to trusted domains onlyAs an optional setting, guest invites can be restricted to a configurable list of trusted domains. Enable this setting by adding trusted domains to the org through the guest invite settings page on the security tab. Note: Guest invites must be on for the org for the trusted domains feature to be available.Off - Trusted domains must be explicitly configured to use this option Off - Trusted domains must be explicitly configured to use this optionOff - Trusted domains must be explicitly configured to use this option

Create work

Controls on the ability to create new objects or data types within Asana.

PermissionsDescriptionAdmin defaultMember defaultGuest default
Create company goalsControl who can create company goals to ensure clarity for company-level objectives.✅ On - can create company goals✅ On - can create company goals❌ Off - not available to enable, cannot create company goals (guests may not create any goals
Add custom field to organization field libraryControl who can create global custom fields to maintain a manageable and consistent field library.✅ On - can create global custom fields✅ On - can create global custom fields✅ On - can create global custom fields
Create teamsControl who can create teams within the organization to ensure standardization of teams.✅On - can create teams✅ On - can create teams❌ Off - not available to enable, cannot create teams

Share work

Controls for how users can share information with the organization.

PermissionsDescriptionAdmin defaultMember defaultGuest default
Share portfolios with organization Control who can create or share portfolios with the organization to ensure standardization of public portfolios.✅ On - can share portfolios to organization✅ On - can share portfolios to organization✅ On - can share portfolios to organization

Tasks

Controls for actions users can take on tasks in Asana.

PermissionsDescriptionAdmin defaultMember defaultGuest default
Delete tasksControl who can delete any task in Asana to meet compliance needs. Note: Users may still discard drafts that have not been created as tasks.✅ On - can delete tasks✅ On - can delete tasks✅ On - can delete tasks
Delete only self-created tasksOptionally allow users to retain the permission to delete self-created tasks when overall task deletion permission is off (if they have the task-level permission to do so).✅ On - can delete self-created tasks✅ On - can delete self-created tasks✅ On - can delete self-created tasks

Exporting and importing

Controls for how users can bring data into or out of Asana.

PermissionsDescriptionAdmin defaultMember defaultGuest default
Export project data from AsanaControl who can export project data using Asana’s built-in options (CSV, JSON, PDF, PNG, print) to increase data security and meet compliance needs.✅ On - can export data✅ On - can export data✅ On - can export data
Import files to Asana projectsControl who can import project data into Asana for compliance or standardization. This permission controls Asana's built-in file import options (CSV and AI). Note: This permission does not restrict importing emails as tasks in projects.✅ On - can import data✅ On - can import data✅ On - can import data
Upload files to Asana*Control who can upload files to Asana as attachments. Note: If the ‘Use app’ permission is turned on for the domain and for the role, users may still be able to upload files to Asana via app integrations. To fully restrict all upload capabilities, turn off the upload permission and the use apps permission (either at the domain or role level).✅ On - can upload files✅ On - can upload files✅ On - can upload files
Download files from Asana mobile app*Control who can download files from the Asana mobile app to meet compliance needs.✅ On  - can download files✅ On  - can download files✅ On  - can download files

Apps and API

Control users’ access to integrations.

PermissionsDescriptionAdmin defaultMember defaultGuest default
Use personal access tokens*Control who can use Personal Access Tokens  for your organization to increase data security and meet compliance needs. ✅ On - can create and use personal access tokens✅ On - can create and use personal access tokens✅ On - can create and use personal access tokens
Use apps*Control who can export data from Asana to increase data security and meet compliance needs.✅ On - can use apps✅ On - can use apps✅ On - can use apps

* These permissions also have an org wide default setting available.

Configurable admin permissions

Admins have a number of inherent permissions that allow them to access the admin console and various admin features. In addition to inherent permissions, there is a subset of permissions that may be configured just for the admin role.

Listed below are the current configurable permissions specifically for the admin role in Asana.

User management

By default, admins can assign users to member, guest and admin type roles. Super admins can configure admin user management permissions.

Control user management permissions for admins.

PermissionsDescriptionAdmin default
Manage roles (Create or delete custom roles, modify all role permissions)Allow admins to manage roles, including role creation, deletion and modification of all role permissions.❌ Off - admin cannot manage roles
Assign roles for all role types (members, guests and admins)Control whether or not admins can assign user roles in the admin console.✅ On - admin can assign roles

Related articles

Loading
Understanding User Role Permissions in Asana: Customizable Access Controls for Admins, Members, and Guests