> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytebase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Grant Access

You may want to assign a role to a user or group, it can be done at workspace level or project level.

## Workspace Level

At workspace level, as a **Workspace Admin**, click **IAM & Admin > Members** on the left sidebar.

Here you may grant existing workspace roles or project roles to a user or group. For project level roles, it will be applied to all projects in the workspace. User might have 0 project level roles, but they must have at least one workspace level role. By default, a user has **Workspace Member** role.

<img src="https://mintcdn.com/dbx/yhR4_AKNF_MEUOA1/content/docs/security/database-permission/grant/bb-workspace-grant-access.webp?fit=max&auto=format&n=yhR4_AKNF_MEUOA1&q=85&s=af27721b5b013e62d8c453fce1f20310" alt="bb-workspace-grant-access" width="2774" height="1380" data-path="content/docs/security/database-permission/grant/bb-workspace-grant-access.webp" />

## Project Level

At project level, as a **Workspace Admin**/**Workspace DBA** or **Project Owner** of the project, click **Manage > Members** on the left sidebar.

Here you may grant existing project roles to a user or group.

<img src="https://mintcdn.com/dbx/yhR4_AKNF_MEUOA1/content/docs/security/database-permission/grant/bb-project-grant-access.webp?fit=max&auto=format&n=yhR4_AKNF_MEUOA1&q=85&s=d8c004c7e2c74e4533dced92b09911e9" alt="bb-project-grant-access" width="2590" height="1294" data-path="content/docs/security/database-permission/grant/bb-project-grant-access.webp" />

You can also revoke or edit an granted role.

<img src="https://mintcdn.com/dbx/yhR4_AKNF_MEUOA1/content/docs/security/database-permission/grant/bb-project-revoke-access.webp?fit=max&auto=format&n=yhR4_AKNF_MEUOA1&q=85&s=b254f3fda3cd30048b5b3ca1e23b5d2f" alt="bb-project-revoke-access" width="2592" height="1296" data-path="content/docs/security/database-permission/grant/bb-project-revoke-access.webp" />
