This FAQ explains how user permissions work across jobs, talent, team management, and invoicing on the Braintrust marketplace. These features give your team more control over who can access and manage hiring workflows, ensuring privacy and compliance for enterprise organizations.
π₯ What are the different user permission levels?
There are two access levels on the platform:
1. Unlimited Access (Can manage all jobs)
Those are typically your company admins, who can
- View and manage all jobs in the company
- View all talent and invoices
- Can add subscribers to any job
- Cannot remove subscribers
- Can transfer job ownership
- Can manage company settings (e.g., payment method, team permissions)
2. Limited Access (Can manage only their jobs)
- View only the jobs they own or are subscribed to
- View only talent, applications, and invoices tied to those jobs
- Job owners can add or remove subscribers to their own jobs
- Subscribers cannot manage team members or transfer jobs
- Cannot access company settings
πΈ Team Members permission management view:
π§βπΌ What can each user type see on the βMy Jobsβ page?
- Unlimited Access: Can view all company jobs.
- Limited Access: Can only see jobs they own or are subscribed to.
πΈ Example: Limited-access user only sees their own job:
π§βπ What appears on the βMy Talentβ page?
- Unlimited Access: Sees all talent associated with company jobs.
- Limited Access: Sees only talent working on jobs they own or are subscribed to.
π§Ύ What about invoice visibility?
- The βCan View Invoicesβ toggle allows users to view invoices.
- However, access is scoped to job-level permissions:
- Users can only see invoices for jobs they own or are subscribed to.
- They cannot view invoices for other jobsβeven if they have the invoice permission enabled.
π§ What does βjob ownershipβ mean?
- A Job Owner is the person who created the job.
- Owners have full visibility into the jobβs applications, talent, and offers.
- Only owners and users with unlimited access can add job subscribers.
- Only owners can remove subscribers.
- Owners and users with unlimited access can transfer the job ownership to any other user on the team.
πΈ Manage job subscribers:
π€ What can subscribers do?
- Subscribers can view all applications, candidate details, and offers tied to the job theyβre subscribed to.
- They cannot edit job ownership, add or remove other subscribers.
β Who can add team members to a job?
- Only the job owner or a user with Unlimited Access can add subscribers.
- Only the job owner can remove subscribers.
- Subscribers cannot invite or manage other users.
π³ Who can manage payment methods?
- Only users with Unlimited Access can:
- View and manage the Team Members page
- Update the companyβs payment method
π Are these permissions enforced at the system level?
Yes. Permissions are now fully enforced at the backend level:
- Users cannot access jobs, applications, offers, or invoices unless they are the job owner or a subscriber
- This includes blocking direct URL access
- Users without access also cannot make or send offers
π Summary of Key Permissions
| Capability | Unlimited Access | Limited Access (Owner) | Limited Access (Subscriber) |
| View all jobs | β | π« | π« |
| View jobs they own/subscribe to | β | β | β |
| View all talent | β | π« | π« |
| View talent associated with their jobs | β | β | β |
| View all invoices | β | π« | π« |
| View job-level invoices (if they have the view invoice permission) | β | β | β |
| Access Team Members page | β | π« | π« |
| Change payment method | β | π« | π« |
| Change job owner | β | β | π« |
| Add subscribers | β | β | π« |
| Remove subscribers (other than themselves) | π« | β | π« |
| Make/send offer for all jobs | β | π« | π« |
| Make/send offer for their jobs | β | β | β |