---
title: "App-level permissions"
canonical: "https://support.appfire.com/space/BGdc/3525574669/App-level%20permissions"
format: markdown
---
App-level (or global) permissions determine access to the app and its respective pages, and the scope of actions permitted users can carry out within the app.

## Navigation and access

Only Jira and App Admins can access global security settings.

1. Click the **App settings** () button.
2. Select **Security** from the dropdown.

![App settings dropdown.](media://f5d20a02-e496-49ef-81f5-2620a1abe182)

You are now on the **Administration** > **Security** page.

![BigPicture security page where Jira and App Admins can assing global roles to Jira users..](media://ed80d56a-7a24-4367-a53b-23c9e2c5359c)

## App Security (page)

### Permissions for everyone (toggle)

![Security for everyone toggle on the security page.](media://1c57af99-07a6-42e4-8d45-ffa5e0e27861)

 This toggle switch changes permissions in BigGantt only. It doesn't affect user permissions in Jira.

#### Toggle switched ON

When enabled, every logged-in Jira user has the same administrative level of access, which includes:

- App Administration
- Boxes and their content (depending on Jira permissions and security settings).

When the **Permissions for everyone** toggle is on, you can't assign global roles to individual users or Jira groups because all users have full access to manage the app and boxes. 

Likewise, this toggle disables [box-level security settings](https://appfire.atlassian.net/wiki/spaces/BGdc/pages/3525869840) (security roles for [box types](https://appfire.atlassian.net/wiki/spaces/BGdc/pages/3525967887) are not affected).

| **App *****Security***** page** | **Box *****Security***** page** |
| --- | --- |
| ![Permission for every one are enabled.](media://2dec081a-ea86-42c4-9d49-19ee4d25ee7f) | ![Box security page. The box-level security roles cannot be assigned due to the permissions for everyone option being active.](media://09b16ea2-17f1-4dda-bbf6-5bb15bfc6b8f) |

The **Permissions for everyone** option is useful for small teams or when you're testing the app. It helps you quickly see how things work. But in a live environment, you may need more advanced access controls to keep things secure.

> ℹ️ The **Permissions for everyone **option doesn't override Jira permission settings. If a user is not permitted to access a project in Jira, this option won't allow them to view it in BigGantt, either. 
> ℹ️ 
> ℹ️ If you want your users to view and manage all boxes in BigGantt, ensure you have granted them the relevant permissions in Jira.

#### Toggle switched OFF

When the **Permissions for everyone **option is disabled, Jira/App Admins can manage global role permissions on the **Administration** > **Security **page. The security settings on the **box configuration** >  **Security** page are also enabled.

### Role permissions

There are three global security roles in BigGantt:

- App Admin
- App User
- Resource Admin

#### App Admin 

App Admins have full access to the *App Configuration,* *App Administration*, and every box and gadget. They can create new boxes and view and configure every existing box in the [box hierarchy](https://appfire.atlassian.net/wiki/spaces/BGdc/pages/3525214286). 

> ℹ️ - Jira Admins automatically get the App Admin role, but they do not show up in the App **Administration** > **Security** tab by default.
> ℹ️ - Only Jira Admins and App Admins can give the App Admin role to others.
> ℹ️ - Once a user is granted the App Admin role, they can set up the app and add other users to the App Admin role, even if they aren't Jira Admins.

When a Jira Admin grants someone the App Admin role, that user can manage the app and all boxes. Their name will appear under the App Admin role (**Administration** > **Security**) but not on the **box configuration** > **Security** pages.

| **App *****Security***** page** | **Box *****Security***** page** |
| --- | --- |
| ![App security page.](media://f442f444-a39b-4327-9a10-ff18267e7556) | ![Box security page.](media://fb91e9c1-b20f-4d0d-bfa9-9699ae054561) |

#### App User 

The App User is the basic global role that allows Jira users to:

- See BigGantt under **Apps** in Jira
- Open BigGantt

Access to the app alone does not automatically grant access to individual boxes (even if the App User is permitted to view and/or manage a respective Jira project).

[Important] For that reason, to ensure users can benefit from using BigGantt, they must be granted:

- App User role in BigGantt
- project permissions in Jira
- a box-level security role to view/manage respective boxes
- BigGantt gadgets

Below, you can see how these permissions affect one another:

#### Resource Admin

This role grants you access to and management of all resource-related pages within the app’s *Administration* section. The Resource Admin role builds upon the App User role, meaning that users with this role:

- Have basic access to the app but cannot access the *App Configuration.*
- Can access boxes based on individual box security settings (but they do not get access to all boxes like the App Admin).
- Are allowed to administer resource-related global configuration on the resource [Individual's details page](https://appfire.atlassian.net/wiki/spaces/BGdc/pages/3525935947) (including all its subpages).
- Can access the Administration page but not the Resources tab.

## Grant and manage global security roles

> 📝 Global roles can be assigned to individual Jira users and Jira groups.

Jira and App Admins can grant global roles in BigGantt in the following ways:

1. On the *Security* page, expand the section with the security role you want to assign.
2. From the dropdown, under **Users**, select a Jira user or multiple users in one go; if you want to add a Jira group or groups to a specific role, select them from the list under **Groups**.

![Security page in BigPicture with all global roles listed.](media://db65449c-df99-427b-8ee1-0082fed9ee71)

The roles are assigned, and you don't need to confirm it with any additional buttons.

Alternatively:

1. Click the **+New assignment** button.
2. A dialog appears. Select whether you want to assign a user or a group.

![Assign security role dialog.](media://04ff9f2d-1311-45c5-ac29-ee61627b2495)

3. Next, select the global role from the list.

You can assign only one person or group at a time. To continue adding users and groups to the roles, check the **Add another** box.

4. Click the **Assign** button to finish the process.