Custom permissions for one member

For one member you can grant or deny individual permissions differently from their role, without creating a new role: on Team Settings → Members, with Custom permissions in the member's row. A denial always wins, and a custom grant cannot restore a permission of a switched-off module.

In the Custom permissions window every permission has three states:

• Inherited: the role decides. Next to the row you see whether the role grants it (role: yes or role: no).
• Granted: the member gets it even if their role would not give it.
• Denied: the member does not get it even if their role would give it.

A member with custom permissions is marked custom in the list. Reset to role removes every difference.

You can only grant a permission you hold yourself; you can deny anything. You cannot take Manage in the Settings module away from yourself, so you cannot lock yourself out of team administration.

If several members need the same difference, a role of your own is usually the better choice.