11.3Getting started: seeing and managing who has access

To view and manage permissions across your active workspace, select People & sharing in the left menu. You can also reach this page by selecting Access management from the user menu.

The page is titled Rights Control Tower. For the workspace selected in the top bar, it provides a centralized location to view who can reach what, whether viewed item by item or person by person, along with the history of access changes.

This consolidated view differs from other access settings in Bmator:

• Workspace membership is managed directly on the workspace settings page.
• Individual item permissions are configured on that specific item's access page.

Rights Control Tower views

The Rights Control Tower organizes access into several tabs:

• Overview: Provides a general summary of access across the workspace.
• People: Shows everyone who has access. Within the lists structured by item or by person, you can see the same access grants from either perspective and manage them collectively.
• Invitations sent: Lists People you have invited or shared with, ordered with the most recent first. Each entry displays one of three invitation statuses: Has an account, Not accepted yet, or Shared, no invitation.
• Activity: Displays the chronological audit log and history of access changes across the workspace.

Revoking grants in bulk

You can select multiple grants at once to remove access across several items or users simultaneously.

1. Navigate to People & sharing and open People.
2. Locate the grants you want to remove, whether viewing by item or by person, and tick the checkbox next to each one.
3. Choose the option to revoke the selection. A dialog titled Revoke selected grants? appears, explaining that people who had access only through those grants will lose access.
4. Select Revoke to confirm the removal.

Revoking guest invitations

Under Invitations sent, you can review and revoke invitations sent to external guests. When you revoke an invitation, all items that were shared with that guest are removed. The guest's sign-in link continues to work, but it leads to an empty view with no accessible items.