You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A`team-workspace`resourcerepresentsateam'slocalpermissionsonaspecificworkspace.Teamscanalsohaveorganization-levelpermissionsthatgrantaccesstoworkspaces.HCPTerraformusesthemorerestrictiveaccesslevel.Forexample,ateamwiththe"**Manage workspaces** permission enabled has admin access on all workspaces, even if their `team-workspace` on a particular workspace only grants read access. For more information, refer to [Managing Workspace Access](/terraform/cloud-docs/users-teams-organizations/teams/manage#managing-workspace-access).
50
+
51
+
Any member of an organization can view team access relative to their own team memberships, including secret teams of which they are a member. Organization owners and workspace admins can modify team access or view the full set of secret team accesses. The organization token and the owners team token can act as an owner on these endpoints. Refer to [Permissions](/terraform/cloud-docs/users-teams-organizations/permissions) for additional information.
Copy file name to clipboardExpand all lines: website/docs/cloud-docs/api-docs/variable-sets.mdx
+1-1
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ description: >-
8
8
9
9
A [variable set](/terraform/cloud-docs/workspaces/variables#scope) is a resource that allows you to reuse the same variables across multiple workspaces and projects. For example, you could define a variable set of provider credentials and automatically apply it to a selection of workspaces, all workspaces in a project, or all workspaces in an organization.
10
10
11
-
You need [`read variables` permission](/terraform/cloud-docs/users-teams-organizations/permissions#general-workspace-permissions) to view the variables for a particular workspace and to view the variable sets in the owning organization. To create or edit variable sets, your team must have [`Manage Workspace`organization access](/terraform/cloud-docs/users-teams-organizations/teams#managing-organization-access).
11
+
You need [**Read** variables permission](/terraform/cloud-docs/users-teams-organizations/permissions#general-workspace-permissions) to view the variables for a particular workspace and to view the variable sets in the owning organization. To create or edit variable sets, your team must have [**Manage all workspaces**organization access](/terraform/cloud-docs/users-teams-organizations/teams/manage#managing-organization-access).
Copy file name to clipboardExpand all lines: website/docs/cloud-docs/projects/manage.mdx
+1-1
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ This topic describes how to create and manage projects in HCP Terraform and Terr
14
14
You must have the following permissions to manage projects:
15
15
16
16
- You must be a member of a team with the **Manage all Projects** permissions enabled to create a project. Refer to [Organization Permissions](/terraform/cloud-docs/users-teams-organizations/permissions#organization-permissions) for additional information.
17
-
- You must be a member of a team with the **Visible** option enabled under **Visibility** in the organization settings to configure a new team's access to the project. Refer to [Team Visibility](/terraform/cloud-docs/users-teams-organizations/teams#team-visibility) for additional information.
17
+
- You must be a member of a team with the **Visible** option enabled under **Visibility** in the organization settings to configure a new team's access to the project. Refer to [Team Visibility](/terraform/cloud-docs/users-teams-organizations/teams/manage#team-visibility) for additional information.
18
18
- You must be a member of a team with update and delete permissions to be able to update and delete teams respectively.
19
19
20
20
To delete tags on a project, you must be member of a team with the **Admin** permission group enabled for the project.
Copy file name to clipboardExpand all lines: website/docs/cloud-docs/users-teams-organizations/permissions.mdx
+4-4
Original file line number
Diff line number
Diff line change
@@ -104,7 +104,7 @@ Admin permissions include the highest level of general permissions for the works
104
104
Workspace admins have all [General Workspace Permissions](#general-workspace-permissions), as well as the ability to do the following tasks:
105
105
106
106
- Read and write workspace settings. This includes general settings, notification configurations, run triggers, and more.
107
-
- Set or remove workspace permissions for visible teams. Workspace admins cannot view or manage teams that are are [Secret](/terraform/cloud-docs/users-teams-organizations/teams#team-visibility), unless they are also organization owners.
107
+
- Set or remove workspace permissions for visible teams. Workspace admins cannot view or manage teams with the [**Secret**](/terraform/cloud-docs/users-teams-organizations/teams/manage#team-visibility) visibility option enabled unless they are also organization owners.
108
108
- Delete the workspace
109
109
- Depending on the [organization's settings](/terraform/cloud-docs/users-teams-organizations/organizations#general), workspace admins may only be able to delete the workspace if it is not actively managing infrastructure. Refer to [Deleting a Workspace With Resources Under Management](/terraform/cloud-docs/workspaces/settings#deleting-a-workspace-with-resources-under-management) for details.
110
110
@@ -179,7 +179,7 @@ You can grant the following project permissions to teams on a per-project basis.
179
179
-**Team management:**
180
180
-**None:** — No access to view teams assigned to the project.
181
181
-**Read:** — Allows users to see teams assigned to the project for visible teams.
182
-
-**Manage:** — _Implies permission to read._ Allows users to set or remove project permissions for visible teams. Project admins can not view or manage [secret teams](/terraform/cloud-docs/users-teams-organizations/teams#team-visibility) unless they are also organization owners.
182
+
-**Manage:** — _Implies permission to read._ Allows users to set or remove project permissions for visible teams. Project admins can not view or manage [secret teams](/terraform/cloud-docs/users-teams-organizations/teams/manage#team-visibility) unless they are also organization owners.
183
183
184
184
See [General Workspace Permissions](#general-workspace-permissions)for the complete list of available permissions for a project's workspaces.
185
185
@@ -197,7 +197,7 @@ Members of teams with "admin" permissions for a project have [General Workspace
197
197
- Delete the project.
198
198
- Create workspaces in the project.
199
199
- Move workspaces into or out of the project. This also requires project admin permissions for the source or destination project.
200
-
- Grant or revoke project permissions for visible teams. Project admins **cannot** view or manage access for teams that are are [Secret](/terraform/cloud-docs/users-teams-organizations/teams#team-visibility), unless those admins are also organization owners.
200
+
- Grant or revoke project permissions for visible teams. Project admins **cannot** view or manage access for teams that are are [Secret](/terraform/cloud-docs/users-teams-organizations/teams/manage#team-visibility), unless those admins are also organization owners.
201
201
202
202
#### Maintain
203
203
@@ -321,7 +321,7 @@ Allows members to invite users to the organization, remove users from the organi
321
321
322
322
This permission grants the ability to view the list of users within the organization, and to view the organization access of other visible teams. It does not permit the creation of teams, the ability to modify the settings of existing teams, or the ability to view secret teams.
323
323
324
-
In order to modify the membership of a team, a user with Manage Membership permissions must have visibility into the team (i.e. the team must be ["Visible"](/terraform/cloud-docs/users-teams-organizations/teams#team-visibility), or the user must be on the team).
324
+
In order to modify the membership of a team, a user with Manage Membership permissions must have visibility into the team (i.e. the team must be ["Visible"](/terraform/cloud-docs/users-teams-organizations/teams/manage#team-visibility), or the user must be on the team).
325
325
In order to remove a user from the organization, the holder of this permission must have visibility into all of the teams which the user is a member of.
326
326
327
327
~> This permission is intended to allow owners of large organizations to delegate membership management to another trusted team, and should be granted to only teams of trusted users. **Assign with caution:** Users with this permission are able to add themselves to any visible team, and inherit the permissions of any visible team.
0 commit comments