Per-item access
Limit a single asset, password or document to chosen people and teams, right from its page.
Sometimes an item is too sensitive for everyone who can see the client, such as the domain admin password or an HR procedure. Restrict it, and only the people and teams you choose (plus admins) can see it.
You can restrict assets, flexible assets, passwords and documents. You need the Restrict individual items permission and edit access to the item.
Restrict an item
- Open the item. On the right, find the Access card.
- Choose 🔒 Restrict to chosen people. You're given access automatically.
- Under Add a person or team, pick someone, choose Can view or Can edit, and choose Add.
Change someone's level with the dropdown next to their name, or remove them with ✕. All of this happens on the item's own page.
What restriction means
- People without access can't see the item anywhere: not in lists, search, related items, the activity feed, Ask AI or the API.
- People with Can view can see it but can't change it, whatever their role.
- People with Can edit can change it, as their role allows.
- Admins can always see restricted items.
- Restricted items show a 🔒 in lists.
Remove a restriction
In the Access card, choose Remove restriction. Everyone with access to the organization can see the item again.
Tip: Give access to a team rather than to individuals. When someone joins or leaves the team, their access follows automatically.