Workplace administrators have access to account controls and system settings, so it's important to choose administrators carefully, and to limit administrator capabilities using administrator roles.

Roles and permissions

Default administrator roles

There are four different types of default administrator roles that a user can belong to:

System Administrator
- Manages all company data, including system settings, administration roles, content and accounts.
- Manages reported posts and messages across all groups.
- Adds and removes people from Workplace.
- Uses reports of company activity and individual accounts to drive growth.
Content Moderator
- Manages reported posts and messages across all groups.
- Adds and removes people from Workplace.
- Uses reports of company activity and individual accounts to drive growth.
Account Manager
- Adds and removes people from Workplace.
- Uses reports of company activity and individual accounts to drive growth.
Analyst
- Uses reports of company activity and individual accounts to drive growth.

It's best to have at least two users assigned with System Administrator roles on Workplace. This will allow for redundancy in securing the Workplace instance for vital maintenance tasks such as resetting API access token, configuration of Single Sign-On (SSO) settings, ensuring users have the proper permissions for creating groups or editing their own profiles.

Permissions

Workplace offers the possibility to create custom roles by combining a set of permissions to assign to a specific administrator in the instance:

Administration permissions: Add and remove email domains, Change company settings, Add and remove accounts.
Content permissions: Manage group membership, moderate inappropriate content.
Access permissions: Contact Workplace support, see activity statistics.

As an example, if you're considering to create admin roles for your support team, you can create a custom role and only assign Contact Workplace support permission to it. Users will only be able to file support tickets to Workplace support as part of their admin capabilities.

Assign a user an Admin role

Assign a user an Administrator role

You can manage admins by logging in as a System Administrator. Once you're logged in as an Administrator with this permission, you can complete the following steps to assign an admin role:

Go to the Admin Panel.

Click Administrators.

Go to the Admins tab.

To add a new administrator, type in the person's name in the Create a new administrator search bar.

From the pop-up, select the correct admin role and click Save.

To edit permissions or remove admin access for a user click the Change Role button next to the admin.

Create a custom Admin role

Create a custom Administrator role

You can manage admins by logging in as a System Administrator. Once you're logged in as an Administrator with this permission, you can complete the following steps to create a customised administrator role:

Go to the Admin Panel.

Click Administrators.

Go to the Roles tab.

Click on New Role button.

Name your new admin role and select the permissions for the role then click Create.

To edit permissions or delete a custom role click the Edit button next to the role.

Security and governance

Contents

Account management

Authentication

IT configuration

Account lifecycle