Enterprise Hub in Airtable

Updated
  • Updated on Apr 14, 2025
  • Published on Aug 23, 2023
  • 8 minute(s) read

Plan availability

Enterprise Scale plans only

Permissions

  • Only super admins can configure SSO and SCIM for their org.

  • Super admins have:

    • Full visibility and administrative rights over users and workspaces in the organization.

    • Visibility into on-domain users and any external user collaborating on an org-owned workspace, base, or interface.

    • Control Airtable licenses.

    • Ability to create new org units or grant super admin access, new org units through the admin panel that inherit the organization's default security policies.

    • Ability to configure SSO, SCIM, and domains.

    • Power to establish security policies that apply to all org units, by default. Rules for APIs and compliance tools such as EKM, DLP, and audit logs apply to the entire organization.

  • Org-unit admins have:

    • Visibility into specific org units where they are an admin.

    • Administrative rights for workspaces and user permissions on their org units.

    • Visibility into all org unit members, and any on-domain user or external user collaborating on an org unit-owned workspace, base, or interface.

    • Ability to grant org unit admin access.

Platform(s)

Web/Browser, Mac app, and Windows app 

Related reading

Airtable terminology

  • Enterprise Hub - The feature on the Enterprise Scale plan that supports a more complex organizational structure in Airtable with organizational units, central visibility and control for IT, and scalable administration with layers of admin roles (super admin and org unit admin).

Enterprise Hub in Airtable overview

Enterprise Hub is a central home base for IT admins to manage Airtable usage across multiple company levels.

Enterprise Hub offers a flexible way to represent a company’s existing structure via organizational units (org unit). With unlimited organizational units underneath their central organization, customers can create dedicated locations for workspaces of different divisions and departments.

Understanding and using Organizational units 

Organizational units (org units) add an extra layer of structure within organizations. Workspaces and organization members are assigned to org units. Super admins may create unlimited org units, providing flexibility to represent divisions, departments, projects, etc.

Types of organizational units

  • Workspaces - Every workspace within an organization must belong to an org unit. Bases and interfaces within the workspace also belong to the org unit. Workspaces may only belong to one org unit.

  • Org unit membership - Every organization member must belong to an org unit (org unit member). Users may be members of multiple org units. Org unit members create workspaces within their org unit. Org unit membership is not required to collaborate on workspaces, bases, and interfaces that belong to an org unit.

  • Org unit group - Each org unit member belongs to a user group that represents the entire org unit. Users may share workspaces, bases, and interfaces with this group to provide broad visibility and access to all org unit members.

  • Default org unit - If an organization member does not belong to an org unit, they are “unassigned” and become a member of the default org unit.

NOTE

Each org unit has a unique enterprise account ID, so orgs with Enterprise Hub enabled have multiple associated enterprise accounts, one for the overall org and one for each org unit.

To create an org unit

  1. Visit your admin panel as a super admin.

  2. Click Organization. 

  3. Click + Create organizational unit. 

  1. Enter your preferred org name and click Create.

To assign a user to an org unit

  1. Visit your admin panel.

  2. Click Users, then select the user's name you want to assign to the org unit.

  3. Expand the dropdown to the right of the user’s name below the Org unit column.

    1. From the dropdown, search for and locate the preferred unit org for your user.

To assign a service account

  1. Visit your admin panel.

  2. Click Users, then Service accounts.

  3. Search for and select the checkbox next to the account you want to assign to a service account.

  4. Click the … icon at the end of your selected account’s row.

  1. Click Move service account.

  2. Click the ˅ icon, then search for and select your preferred org unit.

  3. Click Move service account.

Organization membership and default org units

Organizations with Enterprise Hub must have domain capture enabled. This means that all Airtable users with verified emails that match one of their organization's email domains become organization members. When an organization is on enterprise hub we will automatically create the default org unit for your organization. If an organization member has not yet been assigned to an org unit, they are “unassigned” and become members of the default org unit. When on-domain users first sign into Airtable they belong to the default org unit, until they are assigned to another org unit.

Note

Org unit admins may only assign users to org units where they are an org unit admin.

Admin roles in Enterprise Hub

Super admin overview

Super admin: Intended for users with central visibility and administrative rights over users and workspaces across the organization. Super admins may view all organization members and any external user collaborating on the organization’s workspaces.

The following actions are limited to super admins:

  • Deactivating organization members' user accounts

  • Signing out organization members of all sessions

  • Requiring organization members to sign in using SSO

  • Editing organization member’s email addresses

To upgrade a member to super admin:

  1. Visit your admin panel as a super admin.

  2. Click Users, select your preferred user and choose Grant SUPER access.

Org unit admin overview

Org unit admin: Intended for line-of-business owners that should have visibility and control limited to specific org units. They have administrative rights for workspaces and user permissions on their org units. Both super admins and org unit admins may grant org unit admin access.

To upgrade a member to org unit admin:

To upgrade a member to org unit admin:

  1. Visit your admin panel.

    1. If you are a super admin, open the specific org unit from Organization.

  2. Click Users, select your preferred user and choose Edit ADMIN access. 

  1. Select your user's admin role, then click Confirm.

Admin panel settings

Note

The "Security & compliance" section of "Settings" in the admin panel is only visible and editable by super admins. These settings and configurations apply to your entire organization, not just individual org units.

To access your admin panel settings:

  1. Visit your Airtable homepage. 

  2. Click your account menu icon in the top-right corner. 

  3. Select Admin, then  Settings.
     

Included in the "Sharing & data" and "Integrations & development" pages of "Settings," super admins can view and establish the default settings applied to all org units. All new org units will aos inherit these settings once created. Super admins may set different settings for each org unit. The default org unit settings always equal the org's default settings.

Super admins can pass on the responsibility of setting their organization's administration to their org unit admins. For each setting, super admins can set it to set the administration of org units to org unit admins. For each of these settings, the super admin can set it to:

  • Unlocked: Org unit admins may override the org defaults for their specific org unit.

  • Locked: Org unit admins cannot make changes to admin panel settings.

To lock a setting:

  1. Click the arrow to the right of the setting from either "Sharing & data" or "Integrations & development." 

  2. Toggle the Lock settings button on/off at the bottom of the page.

Note

After a super admin locks a setting, they need to click “Apply default to all”  to make all org units match the default setting.

FAQs

Who has admin rights over org members, and what actions can they take?

Only super admins can take actions on behalf of a user account. Those actions include:

  • Deactivating user accounts

  • Signing users out of all sessions

  • Requiring users to sign in with SSO

  • Updating user email addresses

Who has data admin rights, and what actions can they take?

Only super admins and and org unit admins have data admin rights. Those rights include:

  • Deleting workspaces, bases, and interfaces

  • Downgrading workspaces, bases, or interfaces

  • Removing users from workspaces, bases, and interfaces 

  • Updating user permissions on workspaces, bases, and interfaces

  • Moving workspaces between org units

Does Enterprise Hub activity require more than a single Airtable license when used across an entire organization?

No, users only need one license for their activity across the organization. Additionally, collaborating across multiple organizations doesn't require additional user licenses.

In the admin panel, super admins can view licenses according to the user’s maximum permission level across the organization. When viewing specific org units, super admins and org unit admins will see licenses according to the user’s maximum permission level in that specific org unit.

How are users billed when collaborating across multiple org units?

Users only consume one license for their activity across multiple orgs. Airtable does not double bill for users who collaborate on multiple org units. A user’s seat type is reflected across the org.

Can service accounts be upgraded to super admin accounts?

Yes, service accounts can be upgraded to have super admin access.

Can admins allocate different invoices to different cost centers using Enterprise Hub?

Enterprise Hub allows you to centralize billing with a single invoice per organization. Customers can then chargeback from that single invoice to different cost centers. We support internal chargeback workflows in three key ways:

  • SCIM metadata: Super admins may assign cost centers to org members with SCIM metadata. This appears in the Users page of the admin panel and the users CSV download. SCIM may only assign metadata to org members.

  • Org unit membership: Each org member is either a member of an org unit or the default org unit. This will appear in the Users page of the admin panel. This is useful for customers who do not use SCIM and want to determine charge backs based on org unit membership. External users may not have org unit membership.

  • Org unit collaboration: From the users CSV download, we list each org unit where a user is currently a collaborator. This is useful for customers who determine chargebacks based on where users collaborate. Additionally, this helps identify billing accountability for external users.

How do user groups work within Enterprise Hub?

Each user group within an org must belong to a single org unit. When a user creates a user group, it belongs to their member org unit. 

When displaying the autocomplete, users can view the following groups:

  • User groups that belong to their member org unit

  • User groups where they are a group member

  • User groups that belong to the default org unit

How do org unit memberships work in Enterprise Hub?

What is the license type in the Admin Panel?

The license type (Viewer, Editor)) in the Admin Panel is primarily used for billing and seat management, reflecting how the user is billed, not necessarily what permissions they hold within specific bases.

Check out our Managing billable collaborators article to learn how to adjust collaborator base permission levels.