Feature Requests

It would be useful if admins could restrict limited members to view only. Currently, members can give limited members access beyond view only, which incurs a cost. We want to avoid having to monitor limited members and the access that has been given to them by members.

I'm an Admin of Business plan. I can't reset a member password, I can't reset 2FA method. The only 2 options I have is: resend invitation cancel invite. This is ridiculous. Why admins have so few options to manage user's accounts?... An admin should have rights to: reset password reset 2FA remove 2FA change user email change user name

Rather than subtasks always inheriting sharing setting from their parent task it would be really handy to be able to share with guest users at subtask level without fully sharing the parent task. Either by showing limited info for the parent task, or nothing at all.

We’ve avoided using forms for a while now because of the security risk. They’re always public facing, and while the data itself isn’t public, the questions are. When we got the email about the new update, it felt anticlimactic. The feature is finally here, but only if we pay for Enterprise. Really? That’s like a password manager saying, “Want to keep your passwords encrypted? Upgrade to Enterprise.” It’s absurd. Security should never be a premium feature. Even Jotform and Microsoft let you keep internal forms private on standard plans. These companies understand that privacy is a baseline expectation, not a luxury add-on. To be blunt, this approach just makes it more logical and cost-effective to use an external form platform and connect it through APIs or automation tools. Why would anyone upgrade to Enterprise just to get a feature that every other SaaS includes by default? We were genuinely excited about this update, but it’s disappointing to see such a fundamental security improvement locked behind the highest tier. It feels like the decision was made by someone who doesn’t actually use forms in a real-world business environment.

We are asking Guests/external users (people not part of our email domain) to enable their 2FA. But we want to be notified when they turn it off from their personal settings.

[From support ticket] It would be great if you could add an option, forcing the 2fa only for users managed in ClickUp, not for users where the login is already enforced to go through an external IDP (Okta in our case), because when using an external/upstream IDP, a second factor is already used there.

I would like users to be able to customize their personal list with status labels and custom fields that make sense for them, but I do not want standard users to change those values in shared spaces. (We want the tool to but customizable for individuals but cohesive for the group in shared spaces). According the the help agent I worked with, there is not a way to achieve this in current state. We must either: (a) Restrict the "Edit statuses" and "Edit Custom Fields" permissions globally. Users are not able to customize their personal lists. (b) Temporarily change individual user license to Admin when requested (or temporarily increase permissions for all "Member" users) to allow users to set up their lists, then revoke permissions later. (c) Allow "Edit statuses" and "Edit Custom Fields" permissions globally and add manual work to monitor changes via Audit Logs or another strategy.

As an Administrator we would like to have the ability to act as another person. For Example: Our executive team has requested the ability to add time for a person while they are traveling or in an instance where someone forget to add their time. This would also be nice when setting up permissions so you can see what they can see. Right now we are setting up fake account with personal email addresses to see how it works.

For every new user that joins the Team I want him to have a certain permission inside a public Space/Project/List. I have a team with spaces splitted by sectors. The new user would see everything that is public to the team and his permission today allows him to do anything he wants on other tasks. I want it to be public so anyone can be flagged (@) and even set as watcher. If it was private, I would have to invite all this new users to it and set permissions one by one. I don't want every new user from another sector to be able to change tasks from my sector, only see/comment or edit if needed. Setting default permission for new users in a public space would let me "rest", not needing to check if there's any new user with full permissions every week.

Passkeys or Yubikeys are necessary to put any sensitive information on this platform. I can't use or promote ClickUp until one of these are added. There is just too much of a risk... and I really hope that at least ClickUp employees have one of these options activated when they work on backend databases...