All articles

Controlled Admin Permissions

Controlled Admin Permissions are an Enterprise feature. Learn more about the Enterprise plan here.

⏱ 3.5 min read

Overview

Admins are users with extended permissions. There are three types of admins:

  • Account owners
  • Admins with the right to grant/revoke admin rights
  • Regular admins

Each admin type has different restrictions for editing other admin’s permissions. All admin permissions are controlled from the User Management Chart.

User_Management_-_Controlled_Admin_Permissions_002.png

Account Owners

Account owners are the only users in any account who are permitted to:

  • Edit payment information
  • Choose a billing plan
  • Access invoices
  • Cancel the subscription

Along with these four permissions, account owners on Enterprise subscriptions have all of the Enterprise admin permissions described below, by default.

Enterprise Admin Permissions

In Enterprise accounts, controlled admin permissions are grouped into categories.

The following permission categories can be granted to admins only by account owners.

Permission Category Gives Admins the Ability to
Log in as another user
  • Log in as other users (regular and external users and/or collaborators)
Grant/revoke admin rights
  • Grant and revoke admin rights from other users
  • Edit admin permissions for regular admins
  • Log in as any user, including collaborators and regular admins
  • Delete regular admins

 

The following permission categories can be granted to admins by account owners or admins with the right to grant/revoke admin rights.

Permission Category Gives Admins the Ability to
Edit names and emails, add/remove people from groups, deactivate and delete individual user accounts*
  • Edit and delete regular users, external users, and collaborators
  • Change a user’s license type
  • Delete and add user emails
  • Add and remove users from user groups
  • Grant users group admin permissions
  • Export a list of users
Reset 2-step verification for users 
Manage groups (add, edit, & delete)*
  • Create and delete user groups
  • Rename user groups
Manage Job roles**
  • Create and manage Job roles in the account
  • Assign Job roles to users
Create Spaces*
  • Create new Spaces in the account
Manage Custom Workflows (add, edit, & delete)*
  • Access the Workflow tab and from there add, edit, and delete workflows
Change status and workflow regardless of workflow restrictions
  • Apply any status and workflow to any task even when the status change is locked for other users
Configure team member's work schedule (workweek, holidays, etc)*
  • Access the Work Schedules tab of Account Management
  • Change the month the fiscal year starts on
  • Designate the first day of the week for guest users
  • Choose the default date format for guest users
Manage Timelog Categories (add, edit & delete)*
  • Access the Timelog tab and from there, add, edit, and delete categories
Add, edit, and remove Request Forms.*
  • Access the Request forms tab and from there, add, edit, and delete request forms
Configure account settings (name, logo, etc)
  • Edit the subscription’s name
  • Upload logos for branded emails and workspaces
  • Generate account backups
Configure advanced security settings
  • Decide who can invite new users
  • Restrict invitations to a specific domain
  • Specify the type of licenses which users can grant
  • Control attachment settings
  • Manage password policy settings
  • Enable SSO for the account
Generate user Activity Reports
  • Generate Audit Reports
Export account data
Manage Access Roles

*Marked permissions are granted by default to all new admins. Read below to learn how to edit an admin’s permissions.

**This permission is available only in accounts with the Wrike for Professional Services package or Wrike Resource add-on enabled. It is granted to all account admins by default.

Edit Admin Permissions

Please note:

  • Account owners can edit any admin’s permissions.
  • Admins with the right to grant/revoke admin rights can edit permissions of regular admins.
  • Regular admins cannot edit other admins’ permissions.
  • Account owner’s permissions cannot be edited.
  • It is not possible for any type of admin, including owner, to edit their own admin permissions.

Edit admin permissions:

  1. Click your profile image in the workspace's upper right-hand corner. 
  2. Select "Settings" from the dropdown.
  3. Click "Users" in the left panel to see a list of all users in the account.
  4. Click on the name or profile image of the user whose admin permissions you would like to edit. 
  5. Select “Permissions”. 
  6. Click "Edit permissions" (you may need to scroll to see it). 
  7. Check a box to grant a user the permissions. If the box is unchecked the user will not have the permissions associated with that category.
  8. Click “Save changes”. 

You will be prompted to enter your password and then your changes will go into effect immediately. An email is sent to the newly created admin, the account owner, and all admins with the right to grant/revoke admin rights.

Grant Admin Rights

Account owners and admins with the right to grant/revoke admin rights can grant admin permissions to other users and revoke them. 

  1. Click on your profile image in the workspace's upper right-hand corner. 
  2. Select "Settings" from the dropdown.
  3. Click "Users" in the left panel to see a list of all users in the account.
  4. Click the name or profile image of the user you would like to make an admin. 
  5. Click "Edit settings" (you may need to scroll to see it).
  6. Click the dropdown under "License Type" and select "Administrator". 
  7. Click "Save changes". 

You will be prompted to enter your password and then your changes will go into effect immediately. An email is sent to the newly created admin, the account owner, and all admins with the right to grant/revoke admin rights.

0 comments

Article is closed for comments.

Top