Set permissions

In HCP Terraform you can set individual permissions and sets of permissions to control what your users can do. You can assign permissions at the organization, project, and workspace levels to control user access and the actions they can take.

Hands-on: Try the Manage Permissions in HCP Terraform tutorial.

Background

If you are in an HCP Terraform organization, you can manage user access and permissions through teams.

Each permission a user is granted is additive. HCP Terraform grants a user the highest permissions possible, regardless of whether that permission was set by an organization, project, or workspace. To learn more, refer to Effective permissions.

The following sections explain how to set permissions in HCP Terraform:

• Set organization-level permissions
• Set project-level permissions
• Set workspace-level permissions

Set organization-level permissions

To set organization-level permissions for a team, perform the following steps:

1. Navigate to your organization's Settings page.
2. Click Teams, then select the team name from the list.
3. Assign the permissions you want to grant team members across your organization.
4. Click Update team organization access to save the permissions.

For more information about what each permission grants, refer to Organization permissions.

Set project-level permissions

To set project-level permissions for a team, perform the following steps:

1. Navigate to your organization's Projects page.
2. Select a project from the list, then select Settings in the side navigation.
3. Click Team access, and select the team name from the list or click + Add team to add a new team assignment.
4. Choose one of the preset permission set roles, or set individual permissions to create a custom role.
5. Click Assign permissions to save the settings.

For more information about each permission, refer to Project permissions.

Set workspace-level permissions

To set workspace-level permissions for a team, perform the following steps:

1. Navigate to your organization's Workspaces page.
2. Select a workspace from the list, then select Settings in the side navigation.
3. Click Team access, and select the team name from the list or click + Add team and permissions to add a new team assignment.
4. Choose one of the preset permission set roles, or set individual permissions to create a custom role.
5. Click Assign permissions to save the settings.

For more information about each permission, refer to Workspaces permissions.