23. Sharing and permissions
ALMAS uses a fine-grained ACL (access control list) on top of role-based permissions. You can share specific projects, tasks, files — and so on — with specific users or teams without giving them broad access to everything.
The three levels
| Level | What it grants |
|---|---|
| Read-only | Browse and view the record. Cannot edit, add files, or delete. |
| Read-write | Everything read-only plus: edit fields, add notes, upload files. |
| Admin | Everything read-write plus: delete the record, add and remove other members, change ACL. |
How to share
Open the record (project, task, file, etc.) and click Share. A picker opens. Type a user's name or pick a team. Choose a permission level. Save.
Inheritance
When you share a project, the access cascades to its files, notes, tasks, and child projects. When you share a team, every member of the team picks up the team's permissions.
Seeing who has access
Open the record's Members or Sharing tab. You'll see every user and team with access, what level they have, and how they got it (direct grant, team membership, role).