Team permissions

Permissions at team scope control who can administer your Trialflare organisation: users, trials, and the team account itself. They are separate from trial permissions (trial.*), which apply per study.

Team-level grants are stored against your team’s identifier. In the web app, team managers assign them from Manage team → Users (per-user menu) and can define defaults for new users under Manage team → Settings.

Permission keys

These keys match the team permission chooser in the Trialflare web app.

Permission Description
users.list Find team members by name or email, to add them to trials
users.invite Invite people to trials they manage
users.create Create and invite users (includes users.list and users.invite)
users.delete Delete users
users.manage Update users and manage permissions
trials.create Create trials
trials.manage Manage any trial
team.access Access the team account pages
team.manage Manage the team account

How they interact with trials

  • Trial personnel — Most staff only need team membership plus trial roles or permissions on each study. The Users screen notes that team members must still be added under a trial’s Settings → Collaboration / personnel unless they already have broad access.
  • users.list — Lets a trial administrator search your team to add people as personnel, without being able to invite or change anyone. Searching shows each match's name and email address, so whoever holds it can look up anyone in the team. On a team shared by unrelated studies (student projects, for example), give it only to people who should be able to do that, and add personnel for the rest yourself. Someone who holds it in two teams can add people from either team to studies in both.
  • users.invite — Lets a trial administrator invite people by email from a study's Personnel tab, giving them access to that study and any of its roles. Someone new gets an account in your team, so each invitation counts towards your user limit; it never grants team permissions or access to other studies. It does not include users.list, so it doesn't let them search your team, though inviting an address does show whether that person was already a member (they are added rather than invited).
  • trials.manage — Users with this permission can work across all trials in the team without being added to every trial’s personnel list. It is also needed to use one of the team's academic or commercial licences, when creating a trial or upgrading a sandbox. Trial screens may show a team-level trial admin style indicator for such accounts.
  • team.manage — Required to edit sensitive team Settings (default permissions, SSO fields, password policy, notifications), to manage custom Domains, and to see Logs under the team area.