Skip to main content
Admin Roles & Permissions

Learn about the various roles and their permissions within Envoy.

Updated over a week ago

About admin roles

Role-based administration allows you to provide the right Envoy access to specified team members. You can create your desired team structure to provide access to both onsite and remote team members. This article outlines the details of each available role and its permissions. After learning about each admin role, you can start assigning admin roles to your team.

How admin roles work

Anyone that has been added to the employee directory can be assigned an Envoy admin role. Envoy’s admin roles fall into three categories: global permissions, location-based permissions, and custom permissions.

  • Administrators with global permissions have access to information and/or settings that affect all of your locations.

  • Administrators with location-based roles have access to information and/or settings for specified location(s).

  • Administrators with custom permissions have access to information and/or settings defined for their custom role at the specified locations. Please note that this feature is only available on our Visitors Enterprise Plan and Workplace Premium.

Anyone in the employee directory can access their personal dashboard. When they are assigned an admin role, they’ll still log in to the same dashboard, but they’ll have additional permissions depending on their assigned role.

Admin roles and permissions

Global admin role

Global admins have full access to the following at all locations:

  • Visitor entries and invites at all locations

  • Virtual Front Desk settings and call logs

  • Emergency notification settings and templates

  • Workplace settings at all locations

  • Occupancy, Attendance, Visitor, and Workplace analytics

  • All location settings - address, name, logo, colors, etc.

  • Device management (Visitors, Rooms, and Delivery kiosks)

  • Employee records

  • Admin roles and admin management

  • Billing details (e.g. change credit card, change plan subscription)

  • Health and safety settings

  • Deliveries and delivery area settings

  • Desks assignments and maps

  • Employee reservations

  • Rooms, rooms settings, rooms calendar syncing

  • Learn more about Global admin level access

In addition to location-level permissions, global admins can access the Global overview.

Location admin role

Location admins have full access to the following at their admin-assigned locations:

  • Visitor entries and invites

  • All location settings - address, name, logo, colors, etc.

  • Virtual Front Desk devices

  • Emergency notification settings and location templates

  • Device management (Printers, Visitors and Delivery kiosks)

  • Employee records

  • Occupancy, Attendance, Visitor, and Workplace analytics

  • Assign location-based roles (cannot assign global roles)

  • Location-based analytics (attendance and occupancy)

  • Deliveries and delivery area settings

  • Partial access to location-based Health and Safety settings

  • Desk assignments and maps

  • Employee reservations

  • Learn more about Location admin level access

Billing Admin

  • Full access to billing details (e.g. change credit card, change plan subscription)

  • Learn more about Billing admin level access

Analytics Viewer role

  • View the Occupancy dashboard with limited functionality

  • View the analytics link that a Global or Location admin shares with you.

  • Export analytics as a CSV or image

  • Learn more about Analytics Viewer admin level access

Front desk admin role

Front desk admins can do the following at their admin-assigned locations:

  • Read/Edit all visitor entries at their location. They cannot delete entries.

  • Read device information (Printers, Visitor kiosk, Delivery kiosk)

  • Read employee records

  • View admin roles

  • Access and scan deliveries

  • Manage desks & maps

  • Manage employee reservations

  • Learn more about Front desk admin level access

Security admin role

Security admins can do the following at their admin-assigned locations:

  • Read access to a special security dashboard that shows the day’s invited visitors

  • Learn more about Security admin level access

Deliveries admin role

Deliveries admins can do the following at their admin-assigned locations:

  • Scan deliveries

  • View the delivery log on the web dashboard

  • Learn more about Deliveries admin level access

Custom admin roles

Only available on our Visitors Enterprise plan.

You can create custom admin roles when Envoy's default roles don't quite work for your specific setup. This can be achieved by adding or removing permissions from one of our existing base roles listed above!

  • At this time only the subset of visitor permissions detailed here are customizable.

  • To get started with creating a custom admin role check out our guide here.

Additional Admin Roles and Information


Did this answer your question?