You can control the level of access given to Admins in your account but what does each role even mean?!

Here is a fancy chart to demonstrate the different Admin roles and permissions:

(Feel free to save the image to get a closer look!)

Tip - Parent/Child account permissions can be managed only by Super Admin and Account Manager levels, but all admin levels can access accounts if the aforementioned Admins provide them access.

To find out how to add a new Admin (and how to select their role), click here!

Enboarder's fixed Admin roles each come with a predefined permission set. If none of these line up exactly with what a team member needs, you can now build your own.

From Settings → Roles, account admins with the right permissions can create up to 5 custom roles, each with its own configurable set of permissions. This is especially useful for larger admin teams who need more precise, role-specific access than the fixed roles allow — reducing the risk of giving someone more access than their job requires (over-permissioning) or forcing them onto a higher role just to unlock one feature (under-permissioning).

To create a custom role:

Once saved, the custom role appears alongside the fixed roles wherever you assign an Admin's role.

You can edit a custom role's permissions or rename/delete it at any time. Updating a custom role immediately changes access for every Admin currently assigned to it, so review carefully before saving changes.

When a permission is enabled during custom role creation or editing process, a secondary access-level control appears with two options: Full (default) and View only

Note: This option is only available for Dashboard, Reports, Workflow Builder, Profiles

When creating or editing custom roles in the parent account, there will be a toggle option 'Enable this custom role in all child accounts'.

Once it has been enabled the role will be available for use in all child accounts.

Note: Custom roles can only be edited or deleted from the parent account. Also, it is only available when the account has one or more child accounts.

In the child account's Roles tab, parent-inherited roles are listed alongside locally created ones but carry an 'Inherited' label or badge for clear differentiation.

Inherited roles can be selected and assigned to admin users in the child account.

Notes: If the Reports permission is enabled on an inherited role, the Access to Restricted data toggle is available to be enabled

When a parent-account admin initiates deletion of a custom role that is active in child accounts, the deletion modal notifies of this and blocks deletion until the role is no longer assigned to any users.

The toggle is now available for any role (fixed or custom) that has report access enabled, so you can consistently control sensitive data access across your whole admin team, not just Reporters.

Step 1: Select an Admin whose role includes report access (this now includes the Reporter role, any other fixed role with reporting permissions enabled, and custom roles with reporting permissions enabled), then select the checkbox 'Access to Restricted data' option.

Step 2: Navigate to the Workflow tab and click on the My Assets button found by the folder icon on the left-hand side of the screen.

Step 3: Open the Form you would like this user to have access to.

Step 4: Scroll down to the bottom of the page where you will find 'Form Settings'.

Step 5: Select the 'Restricted access to data' option. This will open a box where you can select the names of the users who you would like to have access to this form.

That's it! Now, when the selected user(s) log in, they will only be able to access this Form's data.

Got questions? Start a chat with us by clicking the ? icon in the top right of any Enboarder screen!