Roles and permissions
There are three roles. Tenant Owners and Users belong to exactly one organization. Super Admins belong to the platform, not to any organization.
| Role | Who it’s for |
|---|---|
| User | People in an organization who edit PDFs and send them for signature. |
| Tenant Owner | The people who run an organization’s account. The person who signs up is the first owner. |
| Super Admin | The operator of the service. Created with a server script; see Creating the first super admin. |
Permissions
Section titled “Permissions”| Permission | Super Admin | Tenant Owner | User |
|---|---|---|---|
Use the editor and send documents for signature app.use | — | Yes | Yes |
Add, disable, remove users and change roles in their organization users.manage | — | Yes | — |
Choose plans, buy extra signing requests, see invoices billing.manage | — | Yes | — |
See and export their organization's activity report; see every signing request in the organization activity.view | — | Yes | — |
Organization settings: name, Microsoft 365 connection, automatic joining tenant.settings | — | Yes | — |
Platform: list organizations and users, suspend organizations, set custom plans and credits tenants.manage | Yes | — | — |
Platform: activity across all organizations, audit-log integrity check activity.view.all | Yes | — | — |
Details that follow from the roles
Section titled “Details that follow from the roles”- Signing requests. Everyone can see requests they sent (Sent by me) and requests they’re asked to sign (Waiting for me). Tenant Owners also see All in organization, and can send reminders for or cancel any request in their organization that is still out for signature.
- Owners need company. An organization must keep at least one active Tenant Owner. You can’t demote, disable or remove the last one, and you can’t remove yourself.
- Licenses. Every active user counts toward the plan’s user limit, owners included. Disabled users don’t.
- Using the app needs an active subscription. If the organization’s subscription isn’t active, owners are taken to Admin → Billing and other users see No active subscription.
- Signers. People you send a document to don’t need an account or a role. Their signing link is their access.