All articles

Enterprise Account Admin Permissions

TL;DR

Enterprise accounts support controlled admin permissions, so account owners can give admins access only to specific settings and actions. Some permissions, like log in as another user, transfer resources when deleting a user, and grant or revoke admin rights, can only be assigned by the account owner. Other permissions, like managing users, groups, spaces, workflows, custom fields, automation, security, and integrations, can be granted by the owner or by admins who already have permission to manage admin rights.

Table 31. Availability - Legacy plans

Free Professional Business Enterprise
Availability: Legacy Enterprise.; Unavailability: Legacy Free, Legacy Professional, Legacy Business.;

Table 32. Availability

Free Team Business Pinnacle Apex
Availability: Pinnacle, Apex. ; Unavailability: Free, Team, Business;

Overview

Controlled admin permissions are a feature of Enterprise accounts. It allows different admin users within the account to be granted different permissions.

Note

On Pinnacle account admin rights can be additionally adjusted. Learn more about it here.

What Are the Permissions Granted by Account Owners Only

The following permission categories can be granted to admins only by account owners:

  • Log in as another user
  • Transfer resources when deleting a user
  • Grant/revoke admin rights

What Are the Permissions Granted by Admins

The following permission categories can be granted to admins by account owners or admins with the right to grant/revoke admin rights.

Permission category Individual Permissions

Users & Groups

Rights to edit and remove users from account; add and remove users from groups; deactivate users; set up 2-step verification; manage groups and group settings.
  • Edit names and emails, add/remove people from groups, export a user list, deactivate and delete individual user accounts
  • Reset 2-step verification for users
  • Manage groups (add, edit & delete)

Job roles

Rights to manage and assign job roles to users.

Hourly rates

Rights to edit hourly rates.
  • Manage job roles
  • View and manage hourly rates
Spaces
  • Create private spaces
  • Create public spaces
  • Create locked spaces

Custom Workflows

Rights to view, add, edit, and remove Custom Workflows; Rights to convert space workflows to account-wide workflows; Rights to change task/project status and workflow regardless of fixed workflow and approval process.
  • Manage Custom Workflows (add, edit & delete)
  • Change status and workflow regardless of workflow restrictions
Custom Fields
  • Manage custom fields (view, edit, & delete)
Automation
  • Add, edit, and delete Automation rules

Calendars & workweek

Rights to view and configure Work Schedule and Workweek settings per account/user; Rights to adjust fiscal year settings.
  • Configure team member's work schedule (workweek, holidays, etc)

Timetracking categories

Categories let you and your team track the type of time you’re spending on work.
  • Manage Timetracking Categories (add, edit & delete)
Request forms
  • Add, edit and delete Request Forms

Account settings

Rights to update main account settings: account name, custom logo, etc., and to generate account backups; Rights to adjust fiscal year settings.
  • Configure account settings (name, logo, etc)

Advanced security

Rights to manage invitation settings, cloud storage configuration, SSO, SCIM integration, password, and other security policies.
  • Configure advanced security settings
Activity Reports
  • Generate user Activity Reports

Account data access

All account data is shared with Data Administrators
  • Export account data
Integrations
  • Configure integration recipes
Manage permissions
  • Manage Access Roles
  • Manage User Types

What's Next?

Top

Related articles