Per-resource permissions
Grant access to a project or resource without opening the whole workspace. Restricted members begin without resource access.
Open the guideHow it works
Select the resource types, individual resources, and capabilities a restricted member needs. Scoped credentials use the same supported permission boundaries for automation.
Multi-resource operations may require several grants, such as access to every selected server in a cluster. Access to one project does not confer administration of an entire fleet.
What you can do
Explicit grants
Choose resources accessible to the teammate.
Action boundaries
Select the capabilities required by the task.
Dependency checks
Authorize all resources in a multi-resource operation.
Explore more
Ship it your way.
Self-hosted and free, or managed on Openship Cloud — the same workflow either way.