💡 Still using the classic Drata experience? Refer to Admins overview for the original UI.
The Admin role provides unrestricted access to Drata. Admins have full visibility and control across the organization.
What Admins can do
Have full read and write access across the entire application
Can manage users, roles, and organization-level settings
Automatically have access across all workspaces and features
Do not need to be assigned additional roles
Important rules
Admins cannot remove themselves from the Admin role
Admin access applies automatically across all workspaces
Manage roles in Drata
Only Admins can assign, change, or remove roles, or customize role access. To manage roles:
Go to Settings → Organization → Role administration.
Assign a role (including Admin)
Go to Settings → Organization → Role administration.
Select Assign role.
Select the user.
Select the desired role.
Confirm the assignment.
Before assigning a role
If the user does not exist, invite them to the account first
Ensure the email address is recognized in Drata before assigning the role
Update user roles
Admins can update a user’s role to adjust their access and permissions in Drata. Role changes take effect immediately.
Go to Settings → Organization → Role administration.
Select the user you want to update.
If there is a role you would like to remove or reassign, expand that role and select the desired option.
If you would like to assign a new role, select add role button.
Confirm your changes.
Access configuration options
Admins can configure additional access settings for certain roles.
Setting | What it does | Who it applies to | Default behavior |
Read-only access | Allows users to view, filter, and download data available to their role, but prevents any edits or write actions. | Any role where read-only access is enabled | Disabled by default |
Restricted view | Limits access to owned or assigned items only (Example: only the controls or risks a user is responsible for). | Control Managers and Risk Managers only | Enabled by default |
Additional details
Read-only users cannot edit data or perform write actions.
When Restricted view is enabled:
Control Managers can access only controls they own or are assigned to
Risk Managers can access only risks they own or are assigned to
Turn off Restricted view to allow access to all controls or risks.