Account permissions

Who can use this feature
Admins
gray-lightning.svgAvailable on Enterprise plan

 

Account permissions help you control which roles can access specific features and actions across your account.

 

Locating account permissions

To access your account permissions:

1 Click your profile picture in the top right corner.

2 Select Administration.

3 Select Permissions in the left-hand menu.

Group 31 (31).png

From here, you can choose a role and decide which actions that role can take across the account.

 

How to set it up

When you enable account permissions, you can define which role (Admin, Member, Viewer, or Guest) can do what across your account. To start, select the role you want to update from the left side of the Permissions screen:

download (4).gif

 

After you select a role, select the permissions you want to allow that role to have, or clear the permissions to remove that ability from the selected role.

As an example, we select the Member role, then clear Create private boards and Broadcast boards on the web using public link to remove that ability from members. We also select Create main docs and Create private docs to allow members to create docs.

download (5).gif

 

Create custom roles

With custom roles, Enterprise admins can create unique, account-level roles based on a job title, department, or any other definition that fits your team, and then assign specific permissions for that role. This can help simplify account governance while still giving teams the right level of freedom.

To start creating a new role, click New role at the top right of the screen:

Group 31 (32).png

 

Next, enter a name for your custom role and select an existing role that it will inherit permissions from. For example, if you select Guest, your new custom role will inherit the default Guest permissions (like only accessing boards that are shared with them), along with any other permissions that role includes.

Group 31 (33).png

Note: Since custom roles are derived from an existing role, they can only lower the parent role's permission level, not exceed it.

 

Once complete, click Create to finalize the role. You can then assign this role to account members through user management and adjust the permissions of this role just as you would for any other account permissions.

 

Admin privilege permissions

Admin privileges let you customize admin-level capabilities for roles on the account. This is helpful if you want certain account members to manage specific admin areas (like user management, security, or billing) without giving them full admin access.

Note: We recommend caution when granting these permissions, as they allow sensitive admin actions on the account.

 

To access admin-level permissions, scroll down in Permissions until you see the Admin Privileges section.

Group 31 (34).png

What each admin privilege permission means

View the Permissions section lets someone open the Permissions section and view which roles and permissions are configured.

Access the User management section lets someone access user management settings in monday administration.

Access the Security section lets someone access security settings in monday administration.

View the audit log lets someone open and view the account audit log.

Access the Billing section lets someone access billing settings in monday administration.

Access the Content Directory section lets someone access the Content Directory in monday administration.

Access the Apps admin section lets someone access the Apps admin area in monday administration.

Create and edit Managed columns lets someone create and manage managed columns.

 

Tip: If you want to delegate user management without granting broad access to the full directory, consider using department owners. This lets you scope user management to just the account members in a specific department, which supports least-privilege practices. If someone currently has user management permissions only to manage their department, you can remove that broader access and assign them as a department owner instead.

 

Available account permission actions

With account permissions, you can choose which roles can perform specific actions across your account. The list below reflects the current permission groups and labels shown in monday administration.

 

Account

  • Invite users from non-authorized domains
  • Invite guests
  • Upload files in boards and docs
  • Delete files
  • Create workspaces
  • @Mention/Subscribe everyone at account
  • Generate API tokens
  • Create automations / integrations
  • Create integrations
  • Examine experimental features using monday.labs
  • Edit schedules
  • View automation usage page
  • Department owners can invite to account
  • Create projects and portfolios
  • Workspace owners can add themselves as owners to assets in their workspace
  • Export departments CSV

AI Features

  • Create and edit AI-powered automations/columns and utilize AI Assistants
  • Use AI Sidekick
  • Use AI Lead Agent
  • Can publish Vibe apps to the account
  • Enable AI background optimizations
  • Manage account AI limits and quotas
  • Can publish Vibe apps to the account

Boards

  • Create main boards
  • Create private boards
  • Create shareable boards
  • Delete/Archive self owned boards
  • Broadcast boards on the web using public link
  • Create board views
  • Delete self-created views
  • Delete views created by other users
  • Export data to excel
  • Move groups to other boards
  • Allow emails and activities communication

Items

  • Delete self-created items
  • Delete items created by other users
  • Move items to other boards
  • Create docs on items

Dashboards

  • Create main dashboards
  • Send scheduled exports to external users

Workflow

  • Create main workflow
  • Create private workflow

Docs

  • Create main docs
  • Create private docs
  • Create shareable docs
  • Broadcast docs on the web using public link

User Management

  • Create teams
  • Delete teams owned by the user
  • Edit team name and image for teams owned by the user
  • Add/Remove members from teams owned by the user
  • Manage all teams
  • View the Teams page and team cards
  • Upload profile picture
  • Assign users to schedules

Communication

  • Board owners can mute board notifications for all users
  • Create item updates and doc comments
  • Edit self-owned item updates and doc comments
  • Delete self-owned item updates and doc comments
  • Receive and interact with dynamic emails (AMP / Actionable messages)

Admin Privileges

  • View the Permissions section
  • Access the User management section
  • Access the Security section
  • View the audit log
  • Access the Billing section
  • Access the Content Directory section
  • Access the Apps admin section
  • Create and edit Managed columns

Resource Management

  • Access resource directory

Templates

  • Save public templates

 

Tip: When enabling the Create integrations permission, you can select or clear specific integrations that this permission applies to. If the general Create integrations permission is enabled, every new integration added to monday.com will be enabled within account permissions by default. If the general integrations permission is disabled or intermediate, every new integration added will be disabled within account permissions.

 

Other permission types

In addition to account permissions, monday.com also offers board permissions, column permissions, workspace permissions, and dashboard permissions.

If you’re interested in learning more about managing account members, check out the How to manage users on your account article.

 

 

If you have any questions, please reach out to our team right here. We’re available 24/7 and happy to help.

Last modified on

Still have questions?
We can help.

Chat support

Get in touch with our support team through our chat for any questions, concerns, or inquiries.

Community forum

Learn, share ideas and connect with other monday.com customers.

Expert help

Hire a monday.com expert to optimize your workflows.

Is this article helpful?
Help us improve our articles.