What is teams access

What is Teams Access

The Teams Access section allows you to manage which users and roles have access to a particular team. From this page, you can review existing access permissions, grant new access, or revoke access when it is no longer needed.

Open a team of your choice and click Teams Access in the navigation header. 

A list of roles and their corresponding expiration dates (if applicable) will be displayed.

The + Grant Access button in the top-right corner allows you to grant new access, while the – Revoke Access button lets you remove access for selected users or roles. 

What are user roles?

In Vault Synapse, user roles define the responsibilities, permissions, and access rights granted to a user. Roles determine what information a user can view, modify, or share within the system. Each role typically corresponds to a business function or a group of related functions performed by one or more users.

Users are assigned to predefined system roles, each of which comes with a built-in set of privileges. This ensures consistency and security across the platform, while also aligning access rights with organizational requirements. To view the roles assigned to a user, go to the Users module, select a user, and open the User Access tab. The system will display a list of roles associated with the account along with their expiration dates, if applicable.  

How to grant team access

To grant access, open the Teams module and select the team you want to update. In the navigation header, click on the Team Access tab and then select + Grant Access. A modal window will appear where you can choose the company and assign one or more roles from the dropdown lists. Once the correct roles have been selected, click Grant Access to apply the changes. 

How to revoke team access

To revoke access, go to the Teams module and select the team. From the navigation header, open the Team Access tab. You can then select the roles you want to revoke by checking the boxes next to them. If you want to revoke all roles, use the checkbox at the top of the list next to Role. When you are ready, click Revoke Selected Role(s). A warning message will appear to confirm the action—click OK to finalize the removal of access. 

Relative vs. non-relative roles

Relative roles 

Relative roles are tied to a specific entity—and apply only within that context. The authority of a relative role is limited to the area in which it is assigned and does not extend elsewhere. The Administrator defines the scope of these permissions.

Example: If a user is a project member in a project, they will have access only to that project and related tasks without impacting other projects.

Non-relative roles

Non-relative roles operate at a higher level and can be configured to grant access across whole entities. These roles are not bound to a single context, making them ideal for full-entity, cross-entity or system-wide access.

Read more about roles here.