Get to Know Org-Level Administrative Account Types

Learning Objectives

After completing this unit, you’ll be able to:

Summarize the permissions and responsibilities of each org-level admin account type.
Describe the common responsibilities of a system account type.

Now that you’ve learned the workspace-level account types, it’s time to explore org-level admin account types.

Discover Org-Level Administrative Account Types

Slack Enterprise+ powers multiple interconnected Slack workspaces across your company. Org-level account types are an additional layer of administration and security and typically make up about 1–3% of your total members. The more members an org has, the more org owners and admins are needed to manage Slack. Org owners and admins can even pass permissions on to workspace admins and members.

Cascading permissions diagram shows how organization policies flow down into workspace policies and then into member settings.

Org Admin

There can be multiple org admins. They help manage org-level administrative tasks. By default, the org admin has the same permissions as workspace owners do, plus additional capabilities. Org admins can:

Create a new workspace.
Create a multi-workspace channel.
Connect IDP groups to workspaces or channels.
Manage Slack Connect channels (Enterprise+).
Set up org-wide app management policies.
Set edit and deletion policies.
Set public file sharing policy.
Move channels between workspaces.
Manage multi-workspace channel creation.
Edit select profile information for members.
Set Slackbot responses policy.

Remember, an org owner or admin can choose to pass on permissions to workspace owners, workspace admins, or even members.

Org Owners

There can be multiple org owners. The org owner can do everything an org admin can do. They can also:

Manage domain claiming.
Set up org-wide app management policies.
Configure single sign-on.
Allow users to change their email address or display name.
Enable mandatory two-factor authentication.

Org Primary Owner

Every org has a single primary owner who holds the highest level of permissions. The primary owner is the most powerful administrative role in Slack. Owners can access high-level administrative features like billing, workspace authentication, access, security policies, and more. There can only be one primary owner of an org, but this role can be transferred to another member.

The org primary owner can do everything an org owner can do, and they can also:

Set the org primary owner as a service account with login access limited to several product stakeholders. This ensures continuity. For example, if an individual owner leaves the company, you won't need to contact Slack to transfer ownership.

System Account Types

System account types give organizations more flexibility around permissions that can be granted to members. System account types, available on the Enterprise+ plan, offer admins the flexibility to delegate permissions across Slack.

Admins with permission to assign account types can give users one or many of the following system account types to help them manage the organization.

Channels admin: Manage how channels are administered, including archiving, renaming, and assigning channel managers.
Compliance admin: Create and manage legal holds.
Roles admin: Manage who is assigned system account types.
Users admin: Manage non-admins, and create and manage user groups.
Audit log admin: Access audit logs in Slack.
DLP admin: Configure and manage DLP for Slack Connect.

Wrap It Up

In an Enterprise+ org, member permissions exist at both the workspace and org levels. If you'd like to keep up to date on the most recent permissions by role, bookmark the Slack Help articles in the resources.

Time Estimate

Topics

Looking for Help?

Slack Resources