Granting Admin Permissions 🔑
Table of Contents:
- Global Admin Roles (Workspace-Wide)
- Granting and Revoking Global Permissions
- Group Owner Roles (Group-Specific)
- How to Grant Group Ownership
Global Admin Roles (Workspace-Wide) (00:44)
These roles grant permissions that impact the entire workspace. They are managed in the Admin Console and are best used for your core project and management teams.
To Grant Global Permissions (02:10):
-
Go to your Account Dropdown and select Admin Console.
-
Click Manage Roles on the left.
-
For the role you want to assign, click the three-dot button.
-
Select Manage Members and add or remove individuals as needed.


- Click Save.
| Role Category | Role Name | Who Should Have It? | Key Permissions |
| Senior Management | Workspace Admin (01:29) | A very small, core group (2-3 people max). | Sees and does everything: Manages navigation, dashboard, branding, and can create/edit/delete content across all groups. |
| People Management | People Admin (02:45) | Rare. Best for teams not using SSO/SCIM integrations to manage people data. | Accesses the Manage People page; can invite, disable, and deactivate users. |
| Culture/L&D | Recognition Admin (03:13) | People Experience or L&D team members. | Creates new badges, assigns badges, and manages/deletes submitted shoutouts. |
| IT/Security | Access Control Admin (03:37) | Your IT team. | Accesses the User Provisioning and Login page to manage SSO and user provisioning settings. |
| Content Management | Resource Admin (04:00) | Content owners who need to manage documentation across the org. | Edits, deletes, and creates pages, links, and glossary entries in all groups they have access to. |
| Content Management | Post Admin (04:32) | Internal Communications professionals. | Creates, edits, deletes, and views analytics for posts in all groups they have access to. |
| Content Management | Events Admin (05:10) | Workplace Experience or Internal Events team. | Creates, edits, and manages events in all groups they have access to. |
| Group Structure | Group Admin (05:00) | Extremely rare. | Grants the ability to add and delete entire groups. |
Granting and Revoking Global Permissions
Only Workspace Admins or Access Control Admins can assign roles.
| Action | Instructions | Timestamp |
| Grant Permission | 1. Go to your Account Dropdown and select Admin Console. 2. Click Manage Roles on the left. 3. Click the three-dot button next to the role and select Manage Members (02:10). 4. Use the search bar to find the user and add them. Click Save. | 02:10 |
| Revoke Permission | 1. Follow steps 1-3 above. 2. In the Manage Role Members modal, click the X next to the member whose role you'd like to revoke. Click Save. (Image below) | (In Manage Members modal) |

Group Owner Roles (Group-Specific) (06:02)
These roles grant permissions only within a specific group, making them a great, safe way to empower content owners.
Why use a Group Owner? If you have an Office Manager who should only manage the "Brooklyn Office" group, or a Marketing Director who only manages the "Marketing" group—this is your answer.
The Power of the Group Owner: Group Owners can manage the group's content, settings, and membership, provided they are enabled to do so in the group's permission settings.
How to Grant Group Ownership (07:34):
-
Navigate to the Group you want to manage.
-
Go to the Group Members page.
-
Find the individual and click to make them an Owner (or revoke the privilege).
-
As a final step, be sure to review the Group Settings to configure who is allowed to create and edit content (Posts, Pages, Events) within that group. The most common setting is Workspace Admins and Group Owners.
And there you have it! You've officially graduated from reader to Haystack master. Go forth, customize, and make your intranet the most brilliant, functional, and well-organized digital space it can be!
Keywords: Haystack, admin permissions, admin console, manage roles, group owner, workspace admin, people admin, resource admin, post admin, events admin, access control, tutorial, guide, user roles, revoking admins