Sharing and permissions

Workspace membership and job sharing provide different kinds of access. A workspace role controls participation in the workspace; sharing gives an audience access to a particular job's results.

Workspace access

Workspace owners, admins, members, and viewers can view workspace jobs. Owners, admins, and members can submit analyses; viewers cannot. Roles also control management actions such as changing membership or deleting work.

A private job is private to its workspace, not solely to its submitter. Assigning a job to a project organizes it without creating a separate permission boundary. Use the intended workspace when submitting work that should be kept separate from another team.

Job visibility

The submitter can open Share in the output panel of a completed, failed, or partial-result job. Choose the audience and select Save:

• Private: The submitter and workspace members can view the job.
• Public: Anyone with the link can view it, including signed-out visitors.
• Logged-in users: Any signed-in ProteinIQ user can view it.
• Invited only: Workspace members and people invited by email can view it.

Use Copy link after checking the saved visibility. Copying a link by itself does not make a private job accessible to an external recipient.

Invite an external reader

Use Invited only when a result should be available to specific people outside the workspace:

1. Open Share and select Invited only.
2. Enter a recipient under Invite by email and select Add.
3. Check that the recipient appears under Invited users. Add other recipients as needed, then use Copy link if you need the URL.

Add immediately saves the invitation and the selected visibility; no separate Save is needed. Recipients receive a result link and must sign in with the invited email address. At least one invite is required for Invited only. A job invitation does not make someone a workspace member or grant permission to submit jobs in that workspace.

Shared results and restricted files

Readers with job access can inspect available results and download result files. Access does not let an external reader edit the original job or run analyses using your workspace's credits.

Submitted input files and error files have stricter access: they remain available to the submitter and system administrators. Workspace administration or a public result link does not by itself grant access to those files.

Inspect the outputs before sharing. Scientific outputs and logs included as result files can contain sequences, identifiers, settings, or other information derived from the input. Restricting the submitted file does not remove that information from the output.

Revoke external access

To stop broad access, change Public or Logged-in users to Private and select Save. Workspace members retain their workspace access.

For an invited reader, use the remove control beside their email in Invited users. Removal takes effect immediately; closing or canceling the dialog does not undo invitation additions or removals. Removing an invitation does not block someone who still has access through workspace membership or a broader visibility setting. If removing the last invitation, change the job to Private as well.

Access changes control subsequent access through ProteinIQ. They cannot recall a file that a recipient has already downloaded.

A recipient cannot open a result

Check the saved visibility, the recipient's signed-in email, and whether the job still exists. For a private job, confirm their workspace membership. For an invited job, confirm the exact email is listed.

If the job opens but a file is denied, distinguish an output file from a submitted input or error file. That restriction can be expected even when result sharing works correctly.