tiCrypt 2.18.1

Projects

Prerequisites

User Role:

Sub-admin, Admin

Category	Permission
Projects	View projects they are a member of
	View the members of projects they are a member of
	View all security requirements
	View all security levels
	View their own certifications
	Tag what they own with a project they are active in
Project Management	Remove project tags of projects they manage
	Create subprojects in projects they manage, edit and delete projects they manage
	Add, edit, and remove users in projects they manage
	View, certify, edit, and remove users' certifications
Project Administration	View all projects
	View the members of every project
	Create top-level projects
	Edit any project, delete any project, tag anything with any project
	Add users to, edit memberships in, and remove users from any project

The Projects table requires View all projects, and its Managers and Members columns require View the members of every project. Each action requires the "any project" permission or its "projects they manage" counterpart:

Action	Permission
Create new top-level project	Create top-level projects
Create subproject	Create top-level projects or Create subprojects in projects they manage
Edit	Edit any project or Edit projects they manage
Delete	Delete any project or Delete projects they manage
Manage member(s)	Add users to any project or Add users to projects they manage
Assign to subadmin(s)	Edit the details of users with a lower role (name, email, department, position)

Projects enforce access-controlled resource separation in tiCrypt. When a resource (file, drive, VM, or inbox) is tagged with a project, only active project members can access it.

Access control chain:

1. Projects are the top-level container. Each project has members with defined roles and an optional security level.
2. Security levels are classification tiers assigned to projects. Each level defines one or more security requirements that members must satisfy.
3. Security requirements are named conditions (e.g., "HIPAA Training Complete," "Secret Clearance Verified"). Requirements are defined system-wide and reused across multiple security levels and projects.
4. Certifications are attestations that a specific user meets a specific requirement. Administrators or project managers grant certifications, each with an optional expiration date.

A user can access project-tagged resources only if they are an active project member and hold valid certifications for all requirements at the project's security level. Projects without a security level are accessible to any active member.

Access Projects from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.

View Projects from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to view.
5. Click the View button in the top right panel.
6. In the left panel, view the project's name, tag, description, security levels, creation & last modified date, managers, members and tagged drives.

View Subprojects from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to view its subprojects.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. View all subprojects in the list.

Create a Top-Level Project from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Click the Create new top-level project button in the top right panel.
5. In the Create new project dialog, fill in the fields described in the table below.
6. Click Create.

tiCrypt confirms with Created project (available upon re-login). The new project becomes available for use after you sign in again.

The following table describes the fields of the project dialogs (Create new project, Create new subproject of <parent>, and Update <project>).

Section	Field	Description
	Name	Required. Up to 80 characters, without / \ | " : * ? < > { }, and different from the other project names.
Project tag	Tag Text	Required. The short label shown on tagged resources, up to 8 characters, without / \ | " : * ? < > { }. A preview shows the tag as you type.
	Tag Color	The color of the tag. A random color is preselected.
Security level	Security Level (optional)	The security level whose requirements all project members must meet to access resources assigned to the project. A new subproject starts with its parent's security level.
Optional fields	Principal Investigator (optional)	Up to 80 characters: letters, apostrophes, commas, and spaces.
	Description (optional)	Up to 250 characters, without <, >, { or }. Markdown is supported.
Custom fields		Additional mandatory or optional fields defined in Custom Fields.

Create a Subproject from Management

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project from which you want to create a subproject.
5. Click the Open full menu button in the top right panel.
6. Select Create subproject.
7. In the pop-up, enter the project name, tag text & color, optional security level, principal investigator and description.
8. Click Create.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project from which you want to create a subproject.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Click the Create new subproject button in the top right panel.
8. In the pop-up, enter the project name, tag text & color, optional security level, principal investigator and description.
9. Click Create.

note

The Create new subproject of <parent> dialog has the same fields as the top-level dialog, including any Custom Fields, and preselects the parent's security level.

Create a Subproject from a Subproject in Management

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject from which you want to create a new subproject.
5. Click the Open full menu button in the top right panel.
6. Select Create subproject.
7. In the pop-up, enter the project name, tag text & color, optional security level, principal investigator and description.
8. Click Create.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject from which you want to create a new subproject.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Click the Create new subproject button in the top right panel.
8. In the pop-up, enter the project name, tag text & color, optional security level, principal investigator and description.
9. Click Create.

Add User(s) to a Project from Management

bulk-action

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to add member(s) to.
5. Click the Manage member(s) button in the top right panel.
6. In the Manage users of <project> dialog, search for and select the users to add, then set the fields described in the table below. With one project selected, the grid lists the current members, and you can remove members from it in the same dialog.
7. Click Save.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to add member(s) to.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Click the Add users to the project button in the top right panel.
8. In the dialog, select the users to add and set the fields described in the table below.
9. Click Save.

The following table describes the membership fields of the dialog.

Field	Description
Expiration (optional)	The date the membership ends. It must be after today. Clear this field if you do not want the member(s) to expire.
Role in project	Regular member: can classify resources with this project (when active). Manager: can also declassify resources to parent projects or remove this project tag completely (when active).
Restrictions	No restrictions: they can view (in the browser) and download any files tagged with the project. Cannot download: they can still view files tagged with the project in the browser. Cannot download, cannot view: they cannot download or view any files tagged with the project.
Existing memberships	Skip: users who already belong to the project are left unchanged. Update: their expiration and role are updated; this option is disabled when you lack permission to edit project memberships.

The dialog notes: "Users must be members of both parent and subproject; attempts will be made to add them to predecessor projects before each addition." When you add users to a subproject, tiCrypt first adds them to every ancestor project with the same role and expiration, and skips ancestor projects they already belong to.

note

If no expiration date is set, the user has indefinite membership in the project.

If you removed members in the grid, tiCrypt asks you to confirm the removal, as described in Delete Project Member(s) from Management.

Certify Member(s) for a Project from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project for which you want to certify member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Click the Certify user(s) for a security requirement button in the top right panel.
8. In the Certify user(s) for a requirement dialog, select the security requirement and the user(s), and set the expiration date. The user list contains only the project's members, or all users when the project has no members yet. The requirement list contains every security requirement, not only the requirements of the project's security level.
9. Click Certify.

For a description of the dialog's fields, see User Certifications.

info

The difference between adding users to projects and certifying users for projects lies in the project type. Any project can have members, but projects with security levels and requirements must have certified members.

Assign a Project to Sub-Admin(s) from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project you want to assign to sub-admin(s).
5. Click the Assign to subadmin(s) button in the top right panel.
6. In the Assign <project> to sub-admin(s) dialog, select one or more users in the Sub-admin(s) field. Only users with the Sub-admin role are listed.
7. Click Assign.

tiCrypt grants each sub-admin management rights for the project and makes them a Manager of it. A sub-admin who is not a member yet is added with a membership that expires in 10 years, and an existing member who is not a manager is upgraded to Manager.

info

Other methods to assign a project to sub-admin(s) are the following:

• Create a Managed Object.
• Assign a Project to Sub-Admin.

Assign Subproject(s) to Sub-Admin(s) from Management

bulk-action

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject(s) you want to assign to sub-admin(s).
5. Click the Assign to subadmin(s) button in the top right panel.
6. In the Assign <project> to sub-admin(s) dialog, select the sub-admin(s) in the Sub-admin(s) field.
7. Click Assign.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject you want to assign to sub-admin(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Select the subproject(s) you want to assign to sub-admin(s).
8. Click the Assign to subadmin(s) button in the top right panel.
9. In the Assign <project> to sub-admin(s) dialog, select the sub-admin(s) in the Sub-admin(s) field.
10. Click Assign.

Edit a Project from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to edit.
5. Click the Open full menu button in the top right panel.
6. Select Edit.
7. In the pop-up, edit the project name, tag text & color, optional security level, principal investigator and description.
8. Once done, click Update.

Edit a Subproject from Management

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject to edit.
5. Click the Open full menu button in the top right panel.
6. Select Edit.
7. In the pop-up, edit the subproject name, tag text & color, optional security level, principal investigator and description.
8. Once done, click Update.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject to edit.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Select the subproject you want to edit.
8. Click the Open full menu button in the top right panel.
9. Select Edit.
10. In the pop-up, edit the subproject name, tag text & color, optional security level, principal investigator and description.
11. Once done, click Update.

Edit Project Member(s) from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to edit its member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Select the member(s) you want to edit.
8. Click the Open full menu button in the top right panel.
9. Select Edit.
10. In the dialog, edit the membership expiration, role, and restrictions. With several memberships selected, first untick Keep expiration unchanged, Keep role unchanged, or Keep restrictions unchanged for each value you want to change.
11. Once done, click Save.

With one membership selected, the Update <user>'s membership in <project> dialog shows the membership's current expiration, role, and restrictions. With several selected, the Update membership of N users in M projects. dialog shows the three Keep ... unchanged checkboxes, all ticked; each value appears for editing only after you untick its checkbox.

Edit Subproject Member(s) from Management

bulk-action

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject to edit its member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Select the member(s) you want to edit.
8. Click the Open full menu button in the top right panel.
9. Select Edit.
10. In the dialog, edit the membership expiration, role, and restrictions. With several memberships selected, first untick Keep expiration unchanged, Keep role unchanged, or Keep restrictions unchanged for each value you want to change.
11. Once done, click Save.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the parent project to edit its subproject member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Select the subproject for which you want to edit its member(s).
8. Click the Open Overlay button in the top right panel.
9. In the new window, under the Members section, click the Members card in the left panel.
10. Select the member(s) you want to edit.
11. Click the Open full menu button in the top right panel.
12. Select Edit.
13. In the dialog, edit the membership expiration, role, and restrictions. With several memberships selected, first untick Keep expiration unchanged, Keep role unchanged, or Keep restrictions unchanged for each value you want to change.
14. Once done, click Save.

Edit and Renew Project Member's Certification from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project for which you want to edit and renew members' certifications.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Select the project member whose certification you want to edit and renew.
8. Click the Open full menu button in the top right panel.
9. Select Edit/Renew.
10. In the pop-up, untick the box Never expires if needed.
11. Update the membership expiration date.
12. Click Save.

Edit and Renew Subproject Member's Certification from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject for which you want to edit and renew members' certifications.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Select the subproject member whose certification you want to edit and renew.
8. Click the Open full menu button in the top right panel.
9. Select Edit/Renew.
10. In the pop-up, untick the box Never expires if needed.
11. Update the membership expiration date.
12. Click Save.

Mark Project Member's Certification(s) as Expired from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project for which you want to mark member's certification(s) as expired.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Select the project member certification(s) you want to mark as expired.
8. Click the Open full menu button in the top right panel.
9. Select Mark as expired.
10. In the pop-up, click Mark expired.

note

• Certifications marked as expired display their dates in red.
• Only certifications for a requirement set to Certificates must be given an expiration date can be marked as expired. If none of the selected certifications qualifies, tiCrypt shows None of the selected certifications can be marked as expired.
• Marking a certification as expired sets its expiration to the current time. The dialog warns that, to undo this, someone authorized will need to re-certify the users.

Mark a Subproject Member's Certification(s) as Expired from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject for which you want to mark member's certification(s) as expired.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Select the subproject member certification(s) you want to mark as expired.
8. Click the Open full menu button in the top right panel.
9. Select Mark as expired.
10. In the pop-up, click Mark expired.

Make an Announcement in a Project from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project for which you want to make an announcement.
5. Click the Open full menu button in the top right panel.
6. Select Make an announcement.
7. In the Make an announcement to <project> dialog, enter your message for the project members.
8. Click Send.

The message is required, can be up to 250 characters, and cannot contain any of the characters / \ | " : * ? < > { }. Announcements are not end-to-end encrypted. When the backend refuses you as the sender, tiCrypt shows You are not a member of <project>.

Make an Announcement in a Subproject from Management

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject for which you want to make an announcement.
5. Click the Open full menu button in the top right panel.
6. Select Make an announcement.
7. In the pop-up, enter your message for the subproject members.
8. Click Send.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the parent project of your subproject.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Select the subproject where you want to make an announcement.
8. Click the Open full menu button in the top right panel.
9. Select Make an announcement.
10. In the pop-up, enter your message for the subproject members.
11. Click Send.

Bulk Email Project Members from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project to bulk email its member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Select the member(s) you want to bulk email.
8. Click the Open full menu button in the top right panel.
9. Select Bulk email.
10. In the pop-up, click Copy to copy the emails or click Download to download the emails.
11. Once done, click Close.

Bulk Email Subproject Members from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject to bulk email its member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Select the member(s) you want to bulk email.
8. Click the Open full menu button in the top right panel.
9. Select Bulk email.
10. In the pop-up, click Copy to copy the emails or click Download to download the emails.
11. Once done, click Close.

Delete a Project from Management

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project you want to delete.
5. Click the Open full menu button in the top center panel.
6. Click Delete.
7. In the Delete <project>? dialog, click Delete project.

The Delete action is available for one project at a time. Before it opens the dialog, tiCrypt checks whether the project is still in use. If the project has members or subprojects, no dialog opens and tiCrypt shows, for example, Project still in use: has 3 members and used by 1 subproject. Remove the members and delete the subprojects first.

Deleting a project cannot be undone

The dialog warns: "This action is permanent and cannot be undone."

Delete a Subproject from Management

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject you want to delete.
5. Click the Open full menu button in the top center panel.
6. Click Delete.
7. In the prompt, click Delete project.

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the parent project of your subproject.
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Properties section, click the Subprojects card in the left panel.
7. Select the subproject you want to delete.
8. Click the Open full menu button in the top center panel.
9. Click Delete.
10. In the prompt, click Delete project.

Delete Project Member(s) from Management

bulk-action

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project from which you want to delete member(s).
5. Click the Manage member(s) button in the top right panel.
6. In the pop-up, click Delete next to the member(s) you want to delete.
7. Click Save.
8. In the confirmation dialog, click Delete 1 membership (or Delete N memberships).

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project from which you want to delete member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Select the member(s) you want to delete.
8. Click the Open full menu button in the top right panel.
9. Select Delete.
10. In the confirmation dialog, click Delete 1 membership (or Delete N memberships).

The confirmation dialog explains: "Removing a user from a project means they will no longer be able to access resources tagged with that project. They will not be able to view or interact with keys or encrypted content for files tagged with the project, attach drives if the drive or VM in question is tagged with the project, view group keys for groups tagged with the project, and vice versa."

Delete Subproject Member(s) from Management

bulk-action

Quick Menu

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject from which you want to delete member(s).
5. Click the Manage member(s) button in the top right panel.
6. In the pop-up, click Delete next to the member(s) you want to delete.
7. Click Save.
8. In the confirmation dialog, click Delete 1 membership (or Delete N memberships).

Overlay

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject from which you want to delete member(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Members card in the left panel.
7. Select the member(s) you want to delete.
8. Click the Open full menu button in the top right panel.
9. Select Delete.
10. In the confirmation dialog, click Delete 1 membership (or Delete N memberships).

Delete Project Member's Certification(s) from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the project for which you want to delete members' certification(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Select the project member certification(s) you want to delete.
8. Click the Open full menu button in the top right panel.
9. Select Delete.
10. In the pop-up, click Revoke.

Delete Subproject Member's Certification from Management

bulk-action

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Projects section.
3. Click the Projects in the left panel.
4. Select the subproject for which you want to delete members' certification(s).
5. Click the Open Overlay button in the top right panel.
6. In the new window, under the Members section, click the Member Certifications card in the left panel.
7. Select the subproject member certification(s) you want to delete.
8. Click the Open full menu button in the top right panel.
9. Select Delete.
10. In the pop-up, click Revoke.