Restricting worker access

Workers can be scoped two ways — to a subset of cases (Assigned cases only on their member profile), and within each assigned case to a subset of file categories (set when assigning). Both are enforced server-side.

Last updated

Workers can be scoped two ways — to a subset of cases (Assigned cases only on their member profile), and within each assigned case to a subset of file categories (set when assigning). Both are enforced server-side, not just hidden in the UI.

What you need

  • Owner or Member role
  • A worker you want to restrict

The two restriction layers

Layer 1 — which cases a worker can see. By default, every workspace member sees every case in every workspace. Toggle Assigned cases only on their member profile and they see only cases where they appear in the case's Team panel. Unassigned cases are unreachable through search, the API, or a direct URL — not just hidden.

Layer 2 — which files on an assigned case they can see. When you add a worker to a case's Team panel, you pick the file categories they can see (permit, invoice, inspection_report, ...). That list drives every view on that case:

  • Files outside those categories are hidden
  • Activity events that reference hidden files are filtered out
  • Inbox case-card chips drop hidden categories
  • AI chat tools refuse — if the worker asks about a file they can't see, the assistant says they don't have access

The two layers compose: a worker might be restricted to 12 assigned cases, and on each case see a different subset of categories.

Step by step (restricting a worker to assigned cases)

  1. Open Settings → Account and expand the Team section.
  2. Find the worker's row and expand it.
  3. Toggle Assigned cases only on.
  4. Assign them to cases via each case's Team panel — pick visible categories at the same time.

Step by step (adjusting category visibility on a case)

  1. Open the case.
  2. In the Team panel, find the worker's row.
  3. Open the menu and pick Edit visibility.
  4. Toggle categories on/off and save. Changes apply on the worker's next page load.
A restricted worker across two cases
Memberriley@acme.com
RoleWorker
Assigned cases onlyon
Case A visible categoriespermit, invoice
Case B visible categoriesinspection_report

Tips

We use cookies to keep you signed in and improve the product. See our Cookie Policy.
Manage preferences