Set user as viewer to all projects in a space

double checking an AI-FDE answer
question was “is there a way to set a user to view all projects in a namespace”,

paraphrased answer was:

  • no automatic way for a given space:

    • space permissions in control panel are for space primitives (like creating new projects)
  • manual ways only via project level access

    • set a user’s view permissions to the project manually OR create a group, add user to it and set group’s permissions to the project manually

Hey @naman !

The only way to do this would be to:

  1. Create a project template that grants that user (and no one else) the Owner role on the project
  2. Only allow creation of project with that project template
  3. Only allow that user to create projects

This means all projects are controlled by that user. If ownership is granted to any other principal they could remove your user from being able to see that project which would break the restriction posed by your question.

You could substitute the word user with group to cause the same effect.

There’s of course home folders. If they are enabled in your stack, your user won’t have access to them as they exist on a per user basis.

1 Like