Admins have unrestricted access to the Drata. Admins can not remove themself as an admin and do not need to be assigned to other roles because they have unrestricted access.

In this help article, learn and discover the functionalities available to admin roles within Drata.

Only admins can assign, change, or remove roles for a personnel. They can also customize the level of access for each personnel.

To manage roles, go to the ‘Role Administration’ page under the company settings.

Or, navigate directly from the 'Quick Start' under 'Assign user roles' in the 'Prepare for employee onboarding'

To learn how to assign Guest Administrators roles, go to RBAC - Manage a Guest Administrators.

To learn how to assign Workspace manager roles, go to RBAC - Workspace Manager Role.
​

For other roles, on the Role Administration page, enter the name of the personnel under the desired role to add that personnel. Admins can also customize the level of permission each personnels has. They can toggle on and off 'Read only' and 'Restricted view' permissions. If there is an ellipse instead of an add button, the personnel might have already been assigned that role.

When enabled for a personnel, the personnel can only view, filter, and download the data on the pages available to the role. They cannot modify the data or do certain actions available on that page. Read only is disabled by default.

A control manager that has restricted view toggled on can only access the controls that they own and are assigned to for tasks or required approvals. A risk manager that has restricted view toggled on can only access the risks they own and are assigned to for tasks.

Restricted view is enabled by default and only available for control managers and risk managers.​ Toggle the restricted view off to allow control managers to access all controls and risk managers to access all risks.

The following image showcases a personnel that is a control manager who has both read-only and restricted view enabled.

Note: When you change a personnel's role, you are assigned the objects (like controls or tasks) that the personnel loses access to due to the role change. You can verify what the personnel has access to under the 'Roles and responsibilities' column.

On the ‘Role Administration’ page, go to the role you would like to update, search for the name of the personnel and select the ellipse and then select 'Change roles'.

Then, on the confirmation modal, select the new role for the personnel. If a certain role is not displayed, the personnel might have already been assigned that role.

Note: When you remove a personnel from a role, you are assigned the objects (like controls or tasks) that the personnel loses access to due to the role change. You can verify what the personnel has access to under the 'Roles and responsibilities' column.

On the ‘Role Administration’ page, go to the role you would like to remove the personnel from, enter the name of the personnel, and select the ellipse and then select 'Remove user'. On the confirmation modal, confirm that you would like to remove the personnel from the role.

Admins have access to the entire app. The following list displays the sections on the side navigation of Drata, each containing pages admins can access.

Note: If your role has the read-only permissions enabled, you can only view, filter, and download the data on the pages available to the role. You cannot modify the data or do certain actions available on that page.

The Dashboard page provides a holistic view about your organization's risk and compliance posture. To learn more, go to Operational Compliance Dashboard.

Access all the tasks on the Tasks page. To learn more about Tasks, go to Task.

Access the following pages under the Compliance section on the navigation bar:

Access the following pages under the Trust section on the navigation bar:

Access the following pages under the Risk section on the navigation bar:

Access the following pages under the Governance section on the navigation bar:

On the Connections page, view or add the available connection. You can also manage your connections or resynchronize the connected vulnerability scanning. Learn more about the available connections.

The Settings page can be found as an option under the user menu. In the Settings page, admins have access to the following sections and everything within it: My Settings and Company Settings.

The Quick Stage page can be found either as the first option in the navigation bar or under the user menu. Quick Start is a list of activities designed to help you get value out of Drata sooner. View the Quick Start Guide Overview for details.

Select the help icon or Help & Feedback option to access the Help & Feedback drawer.

This drawer displays sections containing the help center, upcoming features, and community. You can also grant or revoke remote support access for all personnels on the Help & Feedback drawer.