How are project permissions restricted by role and organisation?

SYMPRO AI uses organisation-level separation and role-based access controls. Users should only access projects, modules, and administrative functions that belong to their organisation and match their assigned role.

What this means in practice

1. Organisation separation: project data is scoped to the relevant company, university, or organisation account.
2. Role-based controls: admin, editor, reviewer, analyst, and other permissions restrict what a user can view or change.
3. Project assignment: reviewers and analysts generally work only on assigned projects or tasks.
4. Administrative access: project setup, user management, publishing, and platform-level controls are limited to authorised users.

This matters because review projects can contain unpublished protocols, licensed documents, confidential client work, and internal decisions.