Tresorit offers three admin roles, each with a different set of permissions. Tresorit Business Standard, Business Plus and Enterprise subscriptions are equipped with an Admin Center, where admins can manage the Tresorit users within their organization and the subscription itself. There are three types of admin roles: subscription owner, co-owner and co-admin.
What are the differences between the three admin roles?
Subscription owners manage the subscription: they are the ones who handle the billing and buy additional licenses.
Co-owners can delete users, remote wipe devices and reset lost passwords when Advanced Control is enabled. They can’t manage billing or buy additional licenses.
📝 Note: This role is only available with an Enterprise plan.
Co-admins help in day-to-day user management: they can invite, suspend and remove users, manage policies, unlink devices and suspend compromised user accounts in case of a breach or a lost device. They can’t manage billing or buy additional licenses. This role is available with an Enterprise / Business Plus plan.
Subscription owner |
Co-owner |
Co-admin |
|
License management | |||
Purchase new licenses |
✓ |
✓ (only by inviting additional users to the subscription) |
- |
Invite new users |
✓ |
✓ |
✓ (if there's an available license) |
Add or revoke co-admin rights |
✓ |
✓ |
✓ |
Add or revoke co-owner rights |
✓ |
✓ |
- |
Transfer the subscription ownership |
✓ |
- |
- |
User management | |||
Manage policy templates |
✓ |
✓ |
✓ |
Unlink user devices |
✓ (if Advanced Control is enabled) |
✓ (if Advanced Control is enabled) |
- |
Revoke user devices |
✓ (if Advanced Control is enabled) |
✓ (if Advanced Control is enabled) |
- |
Suspend or remove other users from the subscription |
✓ |
✓ |
✓ |
Delete user accounts |
✓ |
✓ |
✓ (cannot transfer user folders) |
✓ (if Advanced Control is enabled) |
✓ (if Advanced Control is enabled) |
- |
|
Remote wipe user devices |
✓ (if Advanced Control is enabled) |
✓ (if Advanced Control is enabled) |
- |
Reset lost passwords |
✓ (if Advanced Control is enabled) |
✓ (if Advanced Control is enabled) |
- |
Subscription administration | |||
Add custom branding |
✓ |
✓ |
✓ |
Set up Active Directory |
✓ |
✓ |
- |
Manage billing |
✓ |
- |
- |
Enable Advanced Control |
✓ |
- |
- |
Set up integrations (SSO, SIEM, SCIM based provisioning) |
✓ |
- |
- |
Domain verification |
✓ |
- |
- |
Sign the Data Processing Agreement |
✓ (it can be delegated) |
- |
- |
Still have questions left? Drop us a line