# Security and Permissions TrialGrid manages permissions by [Organization Team](organizations/team.html.md#organization-team), [URL Teams](urls/url_teams.html.md#url-teams) and by [Project Roles](urls/project_roles/index.html.md#project-roles). If you look after your Organization's users and roles, start with the [Administrator Guide](administrator_guide/index.html.md#administrator-guide). ## Organization Level Permissions What a user may do in an Organization is decided by the [Organization Role](organizations/roles.html.md#organization-roles) they hold. A user whose role has the "Administer Permissions" permission can choose the role held by anyone in that Organization, on the [Organization Team](organizations/team.html.md#organization-team) page. Administering permissions does not give a user the other permissions. Someone who administers permissions and also needs, say, to delete URLs holds a role that has both. ## URL Level Permissions At the URL level each user may be assigned permissions to manage URL level objects: see [URL Teams](urls/url_teams.html.md#url-teams). New users will not have any URL level permissions enabled by default. ## Project Level Permissions Users who have access to a URL can view all Projects, unless the Project default setting of 'View All' has been disabled. Users can be assigned a [Project Role](urls/project_roles/index.html.md#project-roles) to give them permissions within a Project. Roles can be assigned when the Project is created or later from the Project Team page. ## Sessions - TrialGrid logs a user out after an hour without activity. A warning is shown a few minutes before. - Sessions are also set to end when the browser closes, though some browsers restore them. - If [support@trialgrid.com](mailto:support%40trialgrid.com) has turned on the [new location email](administrator_guide/organization_settings.html.md#admin-guide-organization-settings) for your Organization, users are emailed when their account signs in from somewhere it has not been used recently. See also [Changing your Password](password_requirements.html.md#password-requirements) for password rules and account lockout, and [Two Factor Authentication](two_factor_authentication.html.md#two-factor-authentication).