> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kinship.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Public vs Restricted Projects — Reference

> Facts and behaviors of public and restricted projects in Kinship: visibility, search behavior, access control, team membership, and management permissions.

Use this page to quickly check how **public** and **restricted** projects behave and what they do not do.

## What public and restricted projects are

* **Public projects**: Projects visible to all team members (default visibility mode).
* **Restricted projects**: Projects marked as confidential, visible only to administrators (or security administrators if enabled) and project team members.

***

## Visibility and access

### Public Projects

| Aspect | Behavior |
| :- | :- |
| **Visibility** | Visible to all team members |
| **Browse access** | All users can browse to project pages |
| **Search results** | Appear in search results for all users |
| **Collection assignment** | Collections can be assigned to this project by any user with collection management permissions |
| **UI indicator** | No special icon |

### Restricted Projects

| Aspect | Behavior |
| :- | :- |
| **Visibility** | Only visible to administrators/security administrators and project team members |
| **Browse access** | Only accessible to authorized users |
| **Search results** | Content not searchable by users without access |
| **Collection assignment** | Collections cannot be assigned to this project by users without access |
| **UI indicator** | Blue lock icon next to project name |

***

## Who can view projects

### Public Projects

* **All team members** can view public projects and their models
* No restrictions on browsing, searching, or accessing content

### Restricted Projects

Restricted projects are visible to:

1. **Administrators** (or **Security Administrators** if enabled)
   * When Security Administrators are enabled, regular Administrators lose access unless they're part of the project team
   * Security Administrators always have access

2. **Project team members**

   * Users who have performed at least one **Synchronize with Central** (SwC) from a model in the restricted project
   * Team membership is automatic based on SwC activity

   <Note>
     This same logic applies to **Model Sync Rules**: since these rules are path-based, they follow the same file access principles. If a user can't access files at a particular path due to company restrictions, they won't be able to sync with models in that path, and thus won't become project team members.
   </Note>

<Warning>
  When Security Administrators are enabled, regular Administrators cannot access restricted projects unless they're part of the project team.
</Warning>

***

## What users without access cannot do

For restricted projects, users without access cannot:

* Browse to the project's page
* See the project or any of its models in the Browse Projects or Browse Models pages
* See search results from the project in the add-in search box or on the webpage search results
* Assign collections to the project

***

## Team membership

### How project team membership works

* Team membership for restricted projects is **automatic**
* A user is added to a restricted project when they perform a **Synchronize with Central** (SwC) from a model in that project
* Once added, the user has ongoing access to the project
* Team membership is based on actual work activity, not manual assignment

### Public projects

* All team members have access by default
* No team membership concept applies

***

## Creating and managing restricted projects

### How to create restricted projects

Restricted projects can be created **From the web interface**

* An administrator (or security administrator) can **Set as Restricted** from the project page

<img className="block" src="https://mintcdn.com/kinship/uNrdKIup3JyqzwqY/images/restricted-project-set-as-restricted.png?fit=max&auto=format&n=uNrdKIup3JyqzwqY&q=85&s=e7dc534376f81b780f8fe8cc3ad86b12" alt="Creating a Restricted Project from the Web Interface" width="2704" height="1756" data-path="images/restricted-project-set-as-restricted.png" />

* An administrator can also **Make Visible to Team** to change a restricted project back to public

<img className="block" src="https://mintcdn.com/kinship/uNrdKIup3JyqzwqY/images/project-set-public.png?fit=max&auto=format&n=uNrdKIup3JyqzwqY&q=85&s=c7665521e712418d8ef1c7d0c56c4946" alt="Making a Restricted Project Visible to the Team" width="2704" height="1756" data-path="images/project-set-public.png" />

### Who can change restricted status

| Action | Member | Content Manager | Administrator | Security Administrator |
| :- | :- | :- | :- | :- |
| View restricted projects | Only if part of project team | Only if part of project team | Only if part of project team (when Sec Admins enabled) | ✔ |
| Change project's restricted status | | | | ✔ |

<Note>
  The table above shows permissions when Security Administrators are enabled. If your team doesn't use this role, Administrators have the same permissions as Security Administrators.
</Note>

***

## Search behavior

### Public Projects

* Project content and model content appear in search results for all users
* Searchable in both the Revit add-in and web interface
* No restrictions on content discovery

### Restricted Projects

* Project content and model content are **not searchable** by users without access
* **In the Revit add-in**: Non-admin project members will see results from a restricted project when working on that project (i.e., when a model from that project is active in Revit)
* If a different model is active in Revit, users won't see results from restricted projects to which they don't have access
* **Restricted collections** work the same way: when assigned to a project, members can see that content when the model in that project is active; if they have a different model open, they won't see the result
* Search results are filtered based on the active model context and user's project team membership

***

## Model Sync Rules integration

Model Sync Rules can automatically create restricted models:

* Rules can be configured to automatically add matching models as **restricted**
* This creates a new restricted model automatically
* Useful for protecting sensitive work based on file location or name patterns

Example: A rule matching `*\confidential\*` can automatically create restricted models for any model in a confidential folder.

***

## Security Administrator implications

When Security Administrators are enabled:

* Regular Administrators lose access to restricted projects unless they're part of the project team
* Only Security Administrators can view and manage restricted projects by default
* This creates separation between general administration and security-sensitive administration

When Security Administrators are **not** enabled:

* Administrators have full access to restricted projects
* Administrators can view, manage, and change restricted status

***

## UI indicators

* **Public projects**: No special icon, appear normally in project lists
* **Restricted projects**: Display a **blue lock icon** next to the project name

The blue lock icon makes it easy to identify restricted projects at a glance in:

* Project browse pages
* Project lists
* Search results (for users with access)

***

## Quick comparison

| Feature | Public Projects | Restricted Projects |
| :- | :- | :- |
| **Default visibility** | All team members | Administrators and project team only |
| **Searchable by** | All users | Only authorized users |
| **UI indicator** | None | Blue lock icon |
| **Collection assignment** | Collections can be assigned by all | Collections can only be assigned by authorized users |
| **Use case** | Standard firm work | Confidential or sensitive work |

***

## Learn more

* [Model Sync Rules](about-model-sync-rules)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.