• Membership types
• Add users to a project
  • Which roles you can assign
  • View users pending promotion
• Updating expiration and role
• Share a project with a group
• Import members from another project
• Remove a member from a project
• Ensure removed users cannot invite themselves back
• Filter and sort project members
  • Display direct members
  • Display indirect members
  • Search for members in a project
  • Sort members in a project
• Request access to a project
  • Withdraw an access request to a project
• Prevent users from requesting access to a project
• Membership and visibility rights

Members of a project

Members are the users and groups who have access to your project.

Each member gets a role, which determines what they can do in the project.

Membership types

Users can become members of a group or project directly or indirectly. Indirect membership can be inherited, shared, or inherited shared.

In the above example:

• Administrator is an inherited member from the demo group.
• User 0 is an inherited member from the demo group.
• User 1 is a shared member from the Acme group that is invited to this project.
• User 2 is an inherited shared member from the Toolbox group that is invited to the demo group.
• User 3 is a direct member added to this project.

Add users to a project

Add users to a project so they become direct members and have permission to perform actions.

Prerequisites:

• You must have the Owner or Maintainer role.
• Group membership lock must be disabled.
• If sign-up is disabled, an administrator must add the user by email first.
• If approval for role promotion is enabled, an administrator must approve the invite.

To add a user to a project:

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. Select Invite members.

4. If the user:

   • Has a GitLab account, enter their username.
   • Doesn’t have a GitLab account, enter their email address.
5. Select a default role or custom role.

6. Optional. Select an Access expiration date. From that date onward, the user can no longer access the project.

   If you selected an access expiration date, the project member gets an email notification seven days before their access expires.

   Maintainers have full permissions until their role expires, including the ability to extend their own access expiration date.

7. Select Invite. If you invited the user using their:

   • GitLab username, they are added to the members list.
   • Email address, an invitation is sent to their email address, and they are prompted to create an account. If the invitation is not accepted, GitLab sends reminder emails two, five, and ten days later. Unaccepted invites are automatically deleted after 90 days.

Which roles you can assign

The maximum role you can assign depends on whether you have the Owner or Maintainer role for the group. For example, the maximum role you can set is:

• Owner (50), if you have the Owner role for the project.
• Maintainer (40), if you have the Maintainer role on the project.

The Owner role can be added for the group only.

View users pending promotion

If administrator approval for role promotions is turned on, membership requests that promote existing users into a billable role require administrator approval.

To view users pending promotion:

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. Select Role promotions tab.

If the Role promotions tab is not displayed, the project has no pending promotions.

Updating expiration and role

If a user is:

• A direct member of a project, the Expiration and Role fields can be updated directly on the project.
• An inherited, shared, or inherited shared member, the Expiration and Role fields must be updated on the group that the member originates from.

Share a project with a group

Instead of adding users one by one, you can share a project with an entire group.

Import members from another project

You can import another project’s direct members to your own project. Imported project members retain the same permissions as the project you import them from.

Prerequisites:

• You must have the Maintainer or Owner role.

If the importing member’s role for the target project is:

• Maintainer, then members with the Owner role for the source project are imported with the Maintainer role.
• Owner, then members with the Owner role for the source project are imported with the Owner role.

To import a project’s members:

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. Select Import from a project.
4. Select the project. You can view only the projects for which you’re a maintainer.
5. Select Import project members.

If the import is successful, a success message is displayed. To view the imported members on the Members tab, refresh the page.

Remove a member from a project

If a user is:

• A direct member of a project, you can remove them directly from the project.
• An inherited member from a parent group, you can only remove them from the parent group itself.

Prerequisites:

• To remove direct members that have the:
  • Maintainer, Developer, Reporter, or Guest role, you must have the Maintainer role.
  • Owner role, you must have the Owner role.
• Optional. Unassign the member from all issues and merge requests that are assigned to them.

To remove a member from a project:

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. Next to the project member you want to remove, select Remove member.
4. Optional. On the confirmation dialog, select the Also unassign this user from related issues and merge requests checkbox.
5. To prevent leaks of sensitive information from private projects, verify the member has not forked the private repository or created webhooks. Existing forks continue to receive changes from the upstream project, and webhooks continue to receive updates. You may also want to configure your project to prevent projects in a group from being forked outside their group.
6. Select Remove member.

Ensure removed users cannot invite themselves back

Users with the Maintainer or Owner role could exploit a race condition that allows them to rejoin groups or projects after an administrator removes them.

To avoid this problem, GitLab administrators can:

• Remove the malicious user session from the GitLab Rails console.
• Impersonate the malicious user to:
  • Remove the user from the project.
  • Log the user out of GitLab.
• Block the malicious user account.
• Remove the malicious user account.
• Change the password for the malicious user account.

Filter and sort project members

You can filter and sort members in a project.

Display direct members

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. In the Filter members box, select Membership = Direct.
4. Press Enter.

Display indirect members

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. In the Filter members box, select Membership = Indirect.
4. Press Enter.

Search for members in a project

To search for a project member:

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. In the search box, enter the member’s name, username, or email.
4. Press Enter.

Sort members in a project

You can sort members in ascending or descending order by:

• Account name
• Access granted date
• Role the members have in the project
• User created date
• Last activity date
• Last sign-in date

To sort members:

1. On the left sidebar, select Search or go to and find your project.
2. Select Manage > Members.
3. At the top of the member list, from the dropdown list, select the item you want to sort by.

Request access to a project

GitLab users can request to become a member of a project.

1. On the left sidebar, select Search or go to and find the project you want to be a member of.
2. In the top right, select the vertical ellipsis () and select Request Access.

An email is sent to the most recently active project Maintainers or Owners. Up to ten project Maintainers or Owners are notified. Any project Owner or Maintainer can approve or decline the request. Project Maintainers cannot approve Owner role access requests.

If a project does not have any direct Owners or Maintainers, the most recently active Owners of the project’s parent group receive the notification.

Withdraw an access request to a project

You can withdraw an access request to a project before the request is approved. To withdraw the access request:

1. On the left sidebar, select Search or go to and find the project you requested access to.
2. Next to the project name, select Withdraw Access Request.

Prevent users from requesting access to a project

You can prevent users from requesting access to a project.

Prerequisites:

• You must have the Owner role for the project.
• The project must be public.

1. On the left sidebar, select Search or go to and find your project.
2. Select Settings > General.
3. Expand Visibility, project features, permissions.
4. Under Project visibility, ensure the Users can request access checkbox is not selected.
5. Select Save changes.

Membership and visibility rights

Depending on their membership type, members of groups or projects are granted different visibility levels and rights into the group or project.

The following table lists the membership and visibility rights of project members.

Footnotes:

1. Users can view only issues of projects they have access to.

The following table lists the membership and visibility rights of group members.

In the following example, User is a:

• Direct member of subgroup.
• Inherited member of subsubgroup.
• Indirect member of subgroup-2 and subgroup-3.
• Indirect inherited member of subsubgroup-2 and subsubgroup-3.