Permissions on monday.com control who can see and change work across your account. This article shows where to find each permission in the product and the key settings to use, so you can match access to your workflow.

Board types

Board types determine who can reach a board before any permissions apply. Use them to set the right audience, then fine-tune with board and column permissions.

Board types

• Main boards — Visible to all team members in the account.
• Private boards — Visible only to people explicitly invited to the board. (Available on Pro and Enterprise plans)
• Shareable boards — Designed for collaborating with guests (external users invited by email). Internal teammates and guests see a Shareable board only if they are explicitly invited. (Available on Standard plan and above)

Board type controls who can reach a board. Once someone has access, board and column permissions determine what they can do.

Column permissions

Available on Enterprise plan

To set column permissions, open the board, select the column menu (three dots on the column header), and choose Restrict column editing or Restrict column view:

Column permissions protect sensitive fields on a board. You can restrict who can edit a column or who can view a column (board owners are never restricted). Edit and view restrictions cannot be enabled on the same column at the same time. Use this for budgets, compensation, approvals, or any field that needs tighter control. Column rules work alongside board, workspace, and account rules.

Board permissions 

To open board permissions, select the three-dot menu in the upper-right of the board and choose Permissions:

Board permissions control who can view or change a board’s content and structure. On non-Enterprise plans, board owners choose a single permission set for the entire board. Board owners always bypass board permissions.

Permission sets (non-Enterprise)

• Edit everything: Non-owners can view and edit content and structure.
• Only edit content: Non-owners can view and edit content but not structure (columns, groups, or views).
• Only edit assigned items: Non-owners can view the board and edit only items and subitems assigned to them. (Available on the Pro plan and above.)
• View and comment: Non-owners can view items and post updates and replies without changing item fields or structure.

After you pick a set, review the categories in the permissions center (Items, Subitems, General, Updates, Columns, Groups, Views, Forms) to confirm what the set allows. Select Save to apply.

On monday.com Enterprise, owners assign built-in roles and then tailor what each role can do by category. Roles set a maximum; you can remove actions for a role, but you cannot grant abilities above that role’s ceiling. Owners always bypass permissions. 

Roles and categories (Enterprise)

Roles

• Owner — Full control; bypasses board permissions.
• Editor — Create and edit items and subitems, post updates, and manage structure (columns, groups) unless restricted by the owner.
• Contributor — Add and edit items and subitems, post updates. By default cannot add or remove columns.
• Assigned contributor — Edit only items assigned to them in a selected People Column (other abilities match a Contributor).
• Viewer — View the board and post updates/replies; cannot change item fields or structure.

After you pick a role, review the categories along the top of the permissions center (Items, Subitems, General, Updates, Columns, Groups, Views, Forms) and adjust what that role can do in each one.

Dashboard permissions

Dashboards can be Main (visible to teammates based on workspace access) or Private (visible only to people you invite). To manage access, open the dashboard and select Invite in the header to add teammates or guests.

Dashboard owners control who can view the dashboard and who can edit it. You can keep subscribers view-only (members) or allow editing (owners), and you can invite external guests to view-only. Keep in mind that people will only see widget data they already have access to on the connected source boards and permitted columns.

Doc permissions

When you create a doc, you can set it as Main, Private, or Shareable. Private docs are visible only to people you invite. Main docs are visible to teammates based on workspace access. Shareable docs let you collaborate with guests (external users you invite by email).

Open the doc and select Share to manage access. At the bottom of the tab you’ll see two key settings:

• Choose who can edit this doc. Pick Only owners to keep editing restricted to doc owners, or Everyone with access to this doc to allow any invited person to edit.
• Share public link. Create a read-only public link so anyone with the link can view the doc without being invited.

Embedded boards or widgets still respect the permissions of their source content, and docs added via the Doc Column inherit the board’s permissions context.

Workspace permissions

Available on Enterprise plan

To configure workspace permissions, open the workspace, select the workspace name dropdown, choose Manage workspace, and then open Permissions tab. It allows workspace owners to control which team members can perform which actions within the workspace.

Enterprise accounts can choose between Open and Closed workspace types to match different collaboration needs. In open workspaces, any team member can join and see Main boards created there. In closed workspaces (Enterprise), people must be invited or approved to join; Main boards are visible to workspace members only. Workspace permissions sit under account policies, so a workspace cannot grant broader access than the account allows.

Account permissions

Available on Enterprise plan

To set account permissions, select your profile picture in the upper-right corner, choose Administration, and open Permissions tab:

Account permissions let admins define who can use key features by user type (admin, member, viewer, guest). Admins can allow or block actions such as creating boards and docs, inviting guests, exporting to Excel, generating API tokens, creating automations and integrations, creating workspaces, managing teams, etc. Admin privileges can also be delegated for specific areas without granting full admin.