Roles & Members
Roles define what actions can be performed on a repository. Members are accounts that have been granted access to a repository through role assignments.
Adding Members
- Navigate to your repository's Settings.
- Go to the Members section.
- Click Add Member and enter the account name of the user you want to add.
- Assign one or more roles to the member.
- Optionally grant additional individual permissions.
Creating Custom Roles
Roles let you define reusable sets of permissions:
- Go to the Roles section in repository settings.
- Click Create Role.
- Give the role a name (e.g.,
developer,reviewer). - Select the permissions this role grants across all available services (repository, git, CI/CD, change requests, etc.).
- Click Save.
Permission Resolution
When the platform checks if a member can perform an action, it evaluates permissions in this order:
- Owner — Repository owners automatically have full access.
- Individual permissions — Direct permission grants to a specific member.
- Role-based permissions — Permissions inherited from assigned roles.
- Group-based permissions — Permissions inherited from group membership.
- Audience permissions — Broad permissions based on public/member/anonymous audience.
- Default: Deny — If no permission grants the action, it is denied.
See the Permissions Reference for a complete list of all available permissions, their keys, and what they control.