clickup-enterprise-rbac

# ClickUp Enterprise RBAC ## Overview Enterprise access patterns for ClickUp API v2. ClickUp's role system is built into the workspace, and the API surfaces roles via member objects. OAuth 2.0 enables multi-workspace apps where each user authorizes their own workspaces. ## ClickUp Role Model ClickUp workspace members have role IDs in the API: | Role ID | Role | Permissions | |---------|------|-------------| | 1 | Owner | Full control, billing, workspace settings | | 2 | Admin | Manage members, spaces, integrations | | 3 | Member | Create/edit tasks, spaces (per permission) | | 4 | Guest | Limited access to shared items only | ```typescript // Get workspace members with roles async function getWorkspaceMembers(teamId: string) { const data = await clickupRequest(`/team/${teamId}`); return data.team.members.map((m: any) => ({ userId: m.user.id, username: m.user.username, email: m.user.email, role: m.user.role, // 1=owner, 2=admin, 3=member, 4=guest roleLabel: { 1: 'owner', 2: 'admin', 3: 'member', 4: 'guest' }[m.user.role], })); } // Check if user can perform admin operations function canAdminister(member: { role: number }): boolean { return member.role <= 2; // Owner or Admin } ``` ## OAuth 2.0 Multi-Workspace App Build apps that access multiple ClickUp workspaces on behalf of users. ```typescript // Step 1: Redirect user to ClickUp authorization function getOAuthUrl(state: string): string { return `https://app.clickup.com/api?clie...