[New] Team admins

Original announcement

Summary

There are API implications for Asana’s recent addition of team admins.

Team admins enable customers to implement role-based access control. Team admins can specifying which users can update team details and manage membership, providing a more secure and customizable experience.

A team admin is a role that exists within each Asana team. Team admins have access to team management features within the context of their specific teams. Note that a team can have one, multiple, or no team admins.

Usage

Previously, any member of a team had the authorization to:

  • Update a team’s name
  • Update a team’s description
  • Update a team’s privacy type
  • Add or remove members from the team

Now, teams with admins, can limit which users can perform the following actions:

  • Update a team’s name
  • Update a team’s description
  • Update a team’s privacy type
  • Add or remove members from the team

As a result of these changes, certain API calls may now respond with a 403 Forbidden status code if the authenticated user lacks the required permissions. These calls include:

See an example of a full team record below, where all_team_members values may be configured to only_team_admins:

{
  "data": {
    "gid": "12345",
    "resource_type": "task",
    "name": "Marketing",
    "description": "All developers should be members of this team.",
    "html_description": "<body><em>All</em> developers should be members of this team.</body>",
    "organization": {
      "gid": "12345",
      "resource_type": "task",
      "name": "My Company Workspace"
    },
    "permalink_url": "https://app.asana.com/0/resource/123456789/list",
    "visibility": "secret",
    "edit_team_name_or_description_access_level": "all_team_members",
    "edit_team_visibility_or_trash_team_access_level": "all_team_members",
    "member_invite_management_access_level": "all_team_members",
    "guest_invite_management_access_level": "all_team_members",
    "join_request_management_access_level": "all_team_members",
    "team_member_removal_access_level": "all_team_members"
  }
}

We recommend reviewing team schemas for full documentation.

Questions & feedback

If you have any questions, feedback, or need further guidance on implementing these changes, please share them below. Your insights and expertise are invaluable.

Best,
Andrew

1 Like