Skip to main content
  1. Ironclad
  2. Get Started
  3. Groups and Permissions

Configure Group Admin Permissions

Ariana Kemp
  • Updated

Groups in Ironclad define user permissions and access to key platform features such as workflows, records, and settings.

Users in the Administrators group have access to all workflows, records, and company settings. This cannot be edited. However, you can create groups with specific admin-level permissions customized to fit your use case. This assigns an Administrator seat type to members of that group.

To give a group full access across Ironclad, including all workflows, records, and company settings, you can grant it admin-level permissions. This assigns an Administrator seat type to members of that group. On the Groups page, you can identify which seat type is assigned to users that are part of a specific group, according to the permissions set for that group, by referring to the Seat Type column.

 

Use Case

At Classics, Inc., both the IT and Legal Operations teams play key roles in managing the company’s Ironclad environment. To balance security and flexibility, the Legal Ops Manager created custom admin groups with granular permissions tailored to each team’s responsibilities.

The Legal Ops (Process Admin) group manages all workflow configurations and records across departments, ensuring process consistency and compliance. The IT Admin group, on the other hand, manages integrations, APIs, users and groups, and company security settings without having access to contract data.

This structure allows IT and Legal Ops to collaborate effectively while maintaining strict data access controls.

 

Permissions

Features Company Settings
Permissions Admin role

Grant Admin Level Permissions to a Group

To grant admin level permissions to a group:

  1. Click your profile icon located in the top right corner of Ironclad. Navigate to Company Settings > Groups.
  2. Select the group you wish to add a permission to, and then click Configure Group.
  3. Scroll down to the Admin Permissions section and customize the group’s permissions. All of the permissions in this section are admin level permissions, and could result in the group’s seat type being changed to Administrator. Refer to the Types of Admin Permissions table for details on each permission.
  4. Click Save.

 

 

Types of Admin Permissions

Permission Requirements Enabling this permission allows users to:

AI Clauses

 None.
  • Access to AI Clauses tab in Company Settings.

API Management
Requires the API package.
  • Access the API and Errors pages in Company Settings.
  • Create and delete:
    • API tokens
    • Webhooks
    • OAuth client applications

Data Manager

 None.
  • Access to Data Manager tab in Company Settings.

Global Clause Library
None. 
  • Access the Clause Library page in Company Settings.
  • Create, delete, and import clauses.

Integrations Management
Some integrations may require purchasing an add-on.

Enabling All integrations allows group members to:

  • Access the Integrations and Errors pages in Company Settings.
  • Set up, configure, and enable all company integrations.

Metadata Import Tool

 Edit/create records permissions.
  • Access to the Metadata Import tool via the Dashboard and Entities tab.

Security and Data Management
  • Access the Security & Data section under the Settings page in Company Settings.
  • Enable offline exports API. Toggling this setting turns on the /enable endpoint. The /enable endpoint allows group members to pull contract info to a spreadsheet, data warehouse, or backup drive through one API call without needing to click through the web application.
  • Enable advanced data encryption (BYOK/HYOK). Toggling this setting allows group members to lock files with their own encryption key instead of the one provided by Ironclad.
    • BYOK: Members can generate a key through a cloud key management service, such as AWS KWS or Azure Key Vault. Ironclad keeps a copy of this key to decrypt on demand.
    • HYOK: Members can encrypt files in Ironclad with their own encryption key. They hold the root key, and Ironclad must call their KMS if it needs to decrypt the encrypted file. Disabling or rotating this key renders any associated data unreadable. 

Settings Management

 None.
  • Ability to configure Company Settings.

User and Groups Management

None.
  • Access the Users and Groups pages in Company Settings.
  • View user summaries and CSV exports.
  • View user seat types.
  • Create and delete groups.
  • Add or invite users to groups.
  • Remove users from groups.
  • Edit group permissions.
  • Set the default user for a group.

Delete Workflows

 None.
  • Ability to delete workflows.

Workflow Designer (WFD)

 Workflow Designer must be enabled.

Reach out to your Customer Success Manager or submit a request with our Support Team to learn more about Workflow Designer pricing and support packages.
Depending on the permission level granted, group members can create and delete WFD templates or publish workflows.
 
There are three permission levels available:
  • No access to Workflow Designer
  • Ability to view and edit specific workflow configurations:
    • Contract for Legal Review
    • Untitled workflow configuration
  • Ability to create and edit all workflow configurations

Workflow Management

 None.
Access and take action on workflows without being a participant. Please note that admin access is only determined for Published workflows.
 
You can grant access to the following workflows:
  • Contract for Legal Review
  • Untitled workflow configuration
  • Contract for Legal Review and Untitled workflow configuration
  • All Workflows (Current and Future)
 
Once enabled, group members can:
  • Cancel workflows
  • Remove or send invites to counterparties on workflows
  • Remove participants from in-flight workflows
  • Reassign workflow approvers
  • Reset or override workflow approves through Edit Info and Update Document during a workflow’s Sign step
  • Change signers during the Sign step
  • Add, remove, and reassign roles
  • Configure options under WFD > Review > Settings:
    • Download Documents
      • Download Permissions
      • Download PDF Permissions
    • Share Documents
      • Share Document Permissions
      • Share PDF Document Permissions
      • Default Email Template 

Resources

Explore articles, courses, and support options to get the most out of Ironclad.

Help Center

Academy

Support

 
 

Related articles

Related Articles

Want to learn more about this feature and more? Review the Related Articles. Here, we provide a list of articles curated just for you.

Related articles

Give Feedback