How are permissions set in Parallel?
Permissions are set in Parallel's teams.
At Parallel, user's permissions are team based. Each user will have access to certain features depending on which teams they are part of.
But don’t get confused! Not all teams in Parallel have permissions, only specific ones.
Let’s see it!
ℹ️ In this article we explain where to find the users' teams in Parallel. |
Here you will learn:
Permissions are granular at feature level
Our permissions' system works based on three states to determine a user's access to a particular feature:
✅ Grant: Grants access to the feature.
＝ Do not grant: Neither grants nor denies access to a feature. It is a neutral state.
❌ Deny: Blocks access to the feature.
Permissions by default
By default, when you sign up in our free plan, all users will belong to the group "All users" and everyone will have the same permissions.
⚠️ Only paid plans allow customizing team permissions.
Teams with customized permissions
Basic permissions customization
Customers in Starter or Growth plans will have an additional team with broader permissions: the "Admins" team 🚀.
➤ What is the difference in permissions between the "All users" team and the "Admins" team?
In this table, you can see the differences in permissions.
| All users | Admins |
Organization |
|
|
Edit organization settings | ＝ Don't grant | ✅ Grant |
Parallels |
|
|
Create templates | ✅ Grant | ✅ Grant |
Create petitions | ✅ Grant | ✅ Grant |
Move templates and parallels | ✅ Grant | ✅ Grant |
Send on behalf of anyone | ✅ Grant | ✅ Grant |
Reports |
|
|
Reports overview | ＝ Don't grant | ✅ Grant |
Template statistics | ＝ Don't grant | ✅ Grant |
Template replies | ＝ Don't grant | ✅ Grant |
Profiles |
|
|
Create and manage profile types | ＝ Don't grant | ✅ Grant |
List profiles | ✅ Grant | ✅ Grant |
Create and update profiles | ✅ Grant | ✅ Grant |
Close profiles | ✅ Grant | ✅ Grant |
Delete profiles | ＝ Don't grant | ✅ Grant |
Delete profiles permanently | ＝ Don't grant | ✅ Grant |
View alerts | ✅ Grant | ✅ Grant |
Subscribe to profiles | ✅ Grant | ✅ Grant |
Integrations |
|
|
Create and manage integrations | ＝ Don't grant | ✅ Grant |
Developer access | ＝ Don't grant | ✅ Grant |
Users |
|
|
View users | ✅ Grant | ✅ Grant |
Manage users | ＝ Don't grant | ✅ Grant |
Teams |
|
|
View teams | ✅ Grant | ✅ Grant |
Create and manage teams | ＝ Don't grant | ✅ Grant |
Manage team permissions | ＝ Don't grant | ✅ Grant |
Contacts |
|
|
View contacts | ✅ Grant | ✅ Grant |
Delete contacts | ＝ Don't grant | ✅ Grant |
Tags |
|
|
Create tags | ✅ Grant | ✅ Grant |
Update tags | ＝ Don't grant | ✅ Grant |
Delete tags | ＝ Don't grant | ✅ Grant |
For more information, you can find here more about the meaning of Grant, Do not Grant and Deny.
➤ Additional team: "Collaborators"
Also, if you need it, we can create another team called "Collaborators" 🤝 with much more restricted permissions than the "All users" team.
In this table, you can see the differences in permissions.
| All users | Admins | Collaborators |
Organization |
|
|
|
Edit organization settings | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Parallels |
|
|
|
Create templates | ✅ Grant | ✅ Grant | ❌ Deny |
Create petitions | ✅ Grant | ✅ Grant | ＝ Don't grant |
Move templates and parallels | ✅ Grant | ✅ Grant | ❌ Deny |
Send on behalf of anyone | ✅ Grant | ✅ Grant | ＝ Don't grant |
Reports |
|
|
|
Reports overview | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Template statistics | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Template replies | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Profiles |
|
|
|
Create and manage profile types | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
List profiles | ✅ Grant | ✅ Grant | ＝ Don't grant |
Create and update profiles | ✅ Grant | ✅ Grant | ＝ Don't grant |
Close profiles | ✅ Grant | ✅ Grant | ＝ Don't grant |
Delete profiles | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Delete profiles permanently | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
View alerts | ✅ Grant | ✅ Grant | ＝ Don't grant |
Subscribe to profiles | ✅ Grant | ✅ Grant | ❌ Deny |
Integrations |
|
|
|
Create and manage integrations | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Developer access | ＝ Don't grant | ✅ Grant | ❌ Deny |
Users |
|
|
|
View users | ✅ Grant | ✅ Grant | ＝ Don't grant |
Manage users | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Teams |
|
|
|
View teams | ✅ Grant | ✅ Grant | ＝ Don't grant |
Create and manage teams | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Manage team permissions | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Contacts |
|
|
|
View contacts | ✅ Grant | ✅ Grant | ＝ Don't grant |
Delete contacts | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Tags |
|
|
|
Create tags | ✅ Grant | ✅ Grant | ＝ Don't grant |
Update tags | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
Delete tags | ＝ Don't grant | ✅ Grant | ＝ Don't grant |
For more information, you can find here more about the meaning of Grant, Do not Grant and Deny.
⚠️ Exception: the Owner of your organization will always have all permissions.
How can I know who is the Owner of my organization? Go to the User Menu -> Organization -> Users. It’s the first user that appears with the Owner tag.
What happens if I have a user in 2 teams with different permissions?
The most restrictive permission always wins.
The priority is set as follows:
“Deny” always has top priority. This means that if a user belongs to a group where ❌"Deny" has been set for a feature, that user will not have access to it, regardless of whether in another group it has been given the status "Grant".
“Grant” has the following priority. If a user belongs to a group where ✅"Grant" has been set and in another group "Do not grant" has been set, the user shall have access to the functionality.
“Do not grant” is the neutral state. If all groups to which a user belongs have been set to ＝"Do not grant", access will be decided by system defaults or, failing that, neither granted nor denied.
Practical Example:
Suppose John belongs to two groups: "All users" and "Collaborators".
If in "All users" "Grant" has been set for a feature, but in "Collaborators" "Deny" has been set instead, John will not have access to that feature due to the priority of the "Deny" status.
Therefore, if you want to grant a permission for a feature to a user, you have to make sure that
the user is in a team that has "Grant" selected for the feature, but also,
that the user is not in any team that has "Deny" for that same feature.
Entirely customizable permissions system
If you want to change teams permissions, or create new teams with customized permissions, you can also do it with Parallel!
Parallel enables your organization to set the correct permissions for every user.
⚠️ Please note that permissions' management is an Enterprise feature. If you are interested in this feature, please contact our sales team. |