Who can use this feature:

Admins

Available for Enterprise only

Available on the Enterprise plan for account admins, account permissions provide the ability to control and manage who can use certain features on your account. 

Keep reading to learn more! 👇 

Locating account permissions

To locate account permissions, click on your profile picture in the upper right corner of the screen and then select "Administration" as shown below.

Once in the administration section, select "Permissions" from the left-hand menu as seen below: 

From there, you will be able to select who can use certain features on your account according to their user type. We'll review exactly how this can be done, below!

How to set it up

When enabling account permissions, you'll be able to define which user type (admin, member, viewer, or guest) is able to do what on your account. Therefore, you can start setting up permissions by first selecting the user type which you'd like to apply the permissions to from the left side of the "Account permissions" screen:

Once you've selected the user type, you can then select the permissions that you want to allow that user type to have, or de-select the permissions to remove that permission ability from the selected user type!

As an example, in the GIF below, we first chose the "Member" user type, and then we de-selected "Create private boards" and "Broadcast boards on the web" to remove that ability from our team members. We then also selected "Create main docs" and "Create private docs" to allow members to have those permissions on our account. 🙌

Available account permission actions

With account permissions, you can choose who has the ability to perform specific actions within your account. You can find the list of available actions below:

Boards

• Create main/shareable/private boards
• Broadcast boards on the web
• Export data to Excel

Items

• Delete self-created items
• Delete items created by other users
• Move groups/items between boards
• Create docs on items

Dashboards

• Create main dashboards  

Docs

• Create main/shareable/private docs
• Broadcast docs on the web using a public link

Account 

• Upload files across the system
• Create workspaces (open or closed)
• @mention/subscribe everyone on the account
• Generate API tokens
• Create automations/integrations
• Edit schedules 

User Management 

• Create/delete/edit teams
• Edit team name and image
• Add/remove members from teams
• Manage all teams
• View the teams page and team cards
• Upload profile picture
• Assign users to schedules 

Communication  

•  Boards owners can mute board notifications 

Admin Privileges 

• Access the User Management section
• Access the Security section
• Access the Billing section
• Access the Content Directory section
• View the permissions section (in view-only mode)
• Access the apps section

Tip: When enabling the "Create integrations" permission, you can select or de-select specific integrations that this will apply to!

Note: If the general "Create integrations" permission is enabled, every new integration added to monday.com will be enabled within the account permissions by default. Conversely, if the general integrations permission is either disabled or intermediate, every new integration added will be disabled within the account permissions.

Admin privilege permissions

We now offer the ability to customize admin-level permissions that users have on the account! This is really valuable if you'd like certain team members to have the ability to perform specific admin actions (such as managing account users, security, or billing) without providing them full admin access to your account.

Show me what each admin privilege permission means

• Access the User management section: Allows users to access and manage everything within the user management section, including managing users and changing their roles, adjusting board ownership, automation ownership, and more. Do note, some of the invite capabilities are still available for full admins only.
• Access the Security section: Allows users to access and manage everything under the Security area within the admin section including login, SSO configurations, audit logs, compliance, session management, activating panic mode, and more. Managing users and teams remotely using SCIM is only available for account admins.
• Access the Billing section: Allows users to access and manage everything under the Billing area within the admin section including managing the account plan type, defining the invoice settings and viewing previous invoices, changing the payment method, setting billing contacts, and more.
• Access the Content Directory section: Allows users to access and manage everything under the Content Directory area within the admin section including the full list and basic info of all workspaces, boards, docs and dashboards in the account, and more.
• View the permission section: Allows users to access the permission section in view-only mode, so that they can understand the permissions and roles applied in the account
• Access the apps section - Allows users to view apps in the account such as reviewing all the apps installed in the account, manage requests to install, define account permissions, see subscription details, uninstall apps etc.
• View the permission section: Allows users to access the permission section in view-only mode, so that they can understand the permissions and roles applied in the account.

Note: We recommend being cautious with granting these permissions as they are very sensitive capabilities that can allow users to perform major admin actions on the account.

To access admin-level permissions, simply scroll all the way down within the account permissions section until you see the "Admin Privileges" section, as shown below.

Tip: Try using the custom roles feature to create unique "sub-admin" roles of your choice using admin privilege permissions!

Create custom roles

With custom roles, Enterprise admins can create unique, account-level roles according to a user's job title, department, or any other definition that fits them, and to then assign specific permissions for that new role. This feature was built with the goal of simplifying the effective governance of an account, whilst giving the proper amount of freedom to employees within their domain.

Note: At this moment, the custom roles feature is only available for Alpha accounts. We're working on fully releasing this feature soon, so stay tuned!

How it works 

Custom roles are created based off of existing roles on the account, and they can then be customized and assigned to any user.

To start creating a new role, click on the "New role" button at the top of the screen, as shown below. 

Next, enter a name for your custom role and select an existing role which it will inherit permissions from. As an example, if you select the existing role of "Guest", your new custom role will inherit the default permissions that a guest has such as the ability to only access boards that are shared with them (amongst other Guest permissions as well).

Note: Since custom roles are a derivative of any existing role, they can only lower the permission level of the parent role and not exceed it.

Once complete, click on "Create" to finalize the creation of your new role! You can then assign this role to users through the user management section and to adjust the permissions of this role, just as you would for any other account permissions. 🙌

Other permission types

In addition to the account permissions mentioned in this article, we also offer the following different permission types on monday.com:

• Board permissions
• Column permissions
• Workspace permissions
• and Dashboard Permissions

Read more about these in the Permissions on monday.com article. If you're interested in learning more about managing your users, check out the How to manage users on your account article.