Before you start

You need administrator access. A contact in People & responsibilities is not automatically a platform user.

Step by step

  1. Open Administration settings with an authorised administrator account.
  2. Locate the platform user whose access you need to manage. Confirm the email and organisation.
  3. Review the assigned role and the granular permissions available for the relevant product, such as NDA viewing, editing, approval, export or signing.
  4. Assign only the access required for the person’s responsibilities and save the change.
  5. Ask the user to refresh and confirm the expected views and actions. Review access periodically.
Local product previewClick to enlarge ↗
Review permissions action by action

Local permissions preview with sample settings. Each column is a role and each row is an NDA action. This illustrates granular access; it is not a recommendation to use these exact assignments.

Separate identity and authority

Identity establishes who signed in. Roles and granular permissions establish allowed actions. Record ownership, job title and a contact entry do not automatically grant an account or administrator access. Confirm organisation and email before making any change.

Test least privilege

  1. List the actual tasks required.
  2. Assign the appropriate role and supported granular permissions without unrelated export/sharing rights.
  3. Save and refresh or sign in again if necessary.
  4. Confirm both the required action and absence of unnecessary access using an authorised test.

Review movers and leavers

Review access when responsibilities change and transfer business ownership where needed. Use the supported suspend/deprovision route while retaining attributable history. Enterprise identity mappings can also affect access; changing a role does not configure SSO or MFA.

What happens next

Views and actions should reflect the user’s effective permissions. Executive dashboard views require the relevant role or explicit view permission.

If something does not look right

If a person is listed only as a contact, check whether they have a linked platform account. Do not assume job title or responsibility assignments grant access.