Assign a role to an admin

This guide shows you how to give an admin a new role.

Who can do this: Admins who have permission to manage role assignments. Org owners can do this by default.

Before you start

• An admin can hold more than one role. Their effective permissions are the union of all their roles.
• To give admin access to a member (someone without admin access), invite them as an admin and choose their first role in the invitation — see the steps below.
• Assigning certain high-privilege roles may ask you to re-authenticate before the change takes effect.

Assign a role to an existing admin

1. Go to Admins (at /admin/admin-security/admins).
2. Click the name of the admin you want to update.
3. Click the Roles tab on their detail page.
4. Click Assign role.
5. In the role picker, select the role you want to add. Both system roles and your custom roles appear in the list.
6. Click Confirm.
   • If the role requires re-authentication, complete the re-auth step when prompted.

The role is added immediately. You see a confirmation message and the Roles tab updates.

Remove a role from an admin

Removing a single role from an admin isn’t available yet: the Roles tab lists each assigned role with Configure data scope, but has no remove option. To remove all of an admin’s access, use Revoke access from the ⋮ menu on their detail page — see Revoke an admin’s access.

Give a member admin access

The member record has no promote option. If the person is already a member of your organization but doesn’t have admin access yet, invite them as an admin:

1. Go to Admins (at /admin/admin-security/admins).
2. Click Invite admin.
3. Enter their Email address, First name and Last name.
4. In Initial role, select the role they should start with.
5. Click Record invitation.

In this version this records the invitation only: no email is sent, the invitation can’t be accepted, and the chosen role is not saved with it, so the person does not gain admin access. See Invite a new admin.

Verify

You’ll know it worked when the assigned role appears in the admin’s Roles tab and their effective permissions update immediately.

If something goes wrong

• Re-auth prompt appears — This is expected for high-privilege roles. Complete the sign-in step to continue.
• Role doesn’t appear in the picker — The role may have been archived. Go to Roles (at /admin/admin-security/roles) to check, or create a new custom role.
• Permissions don’t reflect the new role — Permissions are worked out from the admin’s current roles each time a page loads, so the admin needs to reload any page they already had open. If an action is still missing after a reload, open their Permissions tab: if it isn’t granted there, the role you assigned doesn’t include it — add it to the role, or assign a role that does.

Related

• Create a custom role
• View effective permissions for an admin
• Invite a new admin