Understanding Roles & Permissions

Trunk Tools uses role-based access to control what each person can do across the organization and within individual projects. This article explains each role, its scope and key abilities, and how those roles map to specific actions.

Collaborators & External Access

Need to give access to people outside your organization — such as owners, subcontractors, consultants, or joint-venture partners? Trunk Tools supports Collaborators and document-level permissions (Full or Limited access, scoped to integrations, modules, folders, or files). See Collaborators & Document Permissions for the full guide.

Business Admin

Scope: Organization-wide control

Key Abilities:

Create and manage projects across the business
View and edit all project and user settings
Manage user access and invitations
Configure integrations

Project Manager

Scope in System: Specific project control

Key Abilities:

Manage and edit assigned project settings
Add or remove users within their projects
View project-specific details and users
Configure project-specific integrations

Project Member

Scope in System: Contributing to a project

Key Abilities:

View project details they are assigned to
Access relevant data for day-to-day collaboration
Cannot modify settings or manage users

Permissions by Action

Action	Business Admin	Project Manager	Project Member
Create Projects	✅	❌	❌
View Project Details	✅	✅	✅
Edit Project Settings	✅	✅	❌
Manage Project Integrations	✅	✅	❌
View Users in Assigned Projects	✅	✅	❌
Add/Remove Users from Projects	✅	✅	❌
View All Users in Business	✅	❌	❌
Edit Business Settings	✅	❌	❌
View All Company Projects	✅	❌	❌
Invite New Users	✅	❌	❌
Delete Users	✅	❌	❌
Modify Project User Roles	✅	✅	❌
Modify Business User Roles	✅	❌	❌
Configure SSO Connection	✅	❌	❌
Configure SCIM Connection	✅	❌	❌
Edit Personal Profile	✅	✅	✅

✅ = Allowed

❌ = Not allowed

Key Takeaways

If You Are a…	You Can…	You Cannot…
Business Admin	Do everything across the organization, including SSO/SCIM setup and user management	—
Project Manager	Fully manage their own projects, including settings and users	Change business-wide settings or invite users
Project Member	Collaborate on assigned projects and view relevant data	Modify settings, manage users, or create projects