Enterprise Hub in Airtable

Prev Next

Plan availability

Enterprise Scale

Permissions

Super admins can/have:

  • Configure SSO and SCIM for their org.

  • Full visibility and admin rights over users and workspaces in the organization.

  • Visibility into on-domain users and any external user collaborating on an org-owned workspace, base, or interface.

  • Control Airtable licenses.

  • Ability to create new org units or grant super admin access, new org units through the admin panel that inherit the organization's default security policies.

  • Ability to configure SSO, SCIM, and domains.

  • Power to establish security policies that apply to all org units, by default. Rules for APIs and compliance tools such as EKM, DLP, and audit logs apply to the entire organization.

  • Org-unit admins have:

    • Visibility into specific org units where they are an admin.

    • Administrative rights for workspaces and user permissions on their org units.

    • Visibility into all org unit members, and any on-domain user or external user collaborating on an org unit-owned workspace, base, or interface.

    • Ability to grant org unit admin access.

  • User admins have:

    • Administrative rights over users.

      Ability to manage groups and their memberships.

      Ability to manage workspace, base and interface collaborations

Platform(s)

Web/Browser, Mac app, and Windows app

Related reading

Enterprise Hub in Airtable overview

Enterprise Hub is a central home base for IT admins to manage Airtable usage across multiple company levels.

Enterprise Hub offers a flexible way to represent a company’s existing structure via organizational units (org unit). With unlimited organizational units underneath their central organization, customers can create dedicated locations for workspaces of different divisions and departments.

Using org units in the admin panel

Note

Org units have unique enterprise account IDs, meaning orgs with Enterprise Hub enabled have multiple associated enterprise accounts — one for the overall org and one for each org unit.

Org units add an extra layer of structure within organizations. Workspaces and organization members are assigned to org units. Super admins may create unlimited org units, providing flexibility to represent divisions, departments, projects, etc.

Org unit types:

  • Workspaces: Every workspace within an organization must belong to an org unit. Bases and interfaces within the workspace also belong to the org unit. Workspaces may only belong to one org unit.

  • Org unit membership: Every organization member must belong to an org unit (org unit member). Users may be members of multiple org units. Org unit members create workspaces within their org unit. Org unit membership is not required to collaborate on workspaces, bases, and interfaces that belong to an org unit.

  • Org unit group: Each org unit member belongs to a user group that represents the entire org unit. Users may share workspaces, bases, and interfaces with this group to provide broad visibility and access to all org unit members.

  • Default org unit: If an organization member does not belong to an org unit, they are “unassigned” and become a member of the default org unit.

To create an org unit:

Note

Super admin permissions are required to create org units.

  1. Open your admin panel.

  2. Click Organization.

  3. Click + Create organizational unit.

  4. Enter your preferred org name and click Create.

To assign a user to an org unit:

  1. Open your admin panel.

  2. Click Users.

  3. Select the user's name you want to assign to the org unit.

  4. Expand the dropdown to the right of the user’s name below the “Org unit” column.

    1. From the dropdown, search for and locate the preferred unit org for your user.

To assign a service account

  1. Open your admin panel.

  2. Click Users, then Service accounts.

  3. Select the checkbox next to the account you want to assign to a service account.

  4. Click the icon at the end of your selected account’s row.

  5. Click Move service account.

  6. Click the ˅ icon, then search for and select your preferred org unit.

  7. Click Move service account.

Org membership and default org units

Note

Org unit admins can only assign users to org units where they are an org unit admin.

Organizations with Enterprise Hub must have domain capture enabled. This means that all Airtable users with verified emails that match one of their organization's email domains become organization members. When an organization is on enterprise hub we will automatically create the default org unit for your organization. If an organization member has not yet been assigned to an org unit, they are “unassigned” and become members of the default org unit. When on-domain users first sign into Airtable they belong to the default org unit, until they are assigned to another org unit.

Admin roles in Enterprise Hub

  • Admin (Super admin in Enterprise Hub): Access to all admin panel functionality, including administrative rights over users and workspaces in the organization, and all settings.

  • Org unit admin (Enterprise Hub only): Access to all admin panel functionality in the org unit, including administrative rights for workspaces and user permissions on their org units.

  • User admin: Manages users (including licenses) and groups. Manages workspace, base, and interface permissions.

  • Integration admin: Manages integration settings, including HyperDB.

  • Brand admin: Manages organization branding settings and resource.

Admin panel settings

Note

The "Security & compliance" section of the "Settings" section in the admin panel is only visible and editable by super admins. These settings and configurations apply to your entire org, not just individual org units.

To open your admin panel settings:

  1. Open the admin panel.

  2. Click Settings.

Included in the "Sharing & data" and "Integrations & development" pages of "Settings," super admins can view and establish the default settings applied to all org units. All new org units will also inherit these settings once created. Super admins may set different settings for each org unit. The default org unit settings always equal the org's default settings.

Super admins can pass on the responsibility of setting their organization's administration to their org unit admins. For each setting, super admins can set it to set the administration of org units to org unit admins. For each of these settings, the super admin can set it to:

  • Unlocked: Org unit admins may override the org defaults for their specific org unit.

  • Locked: Org unit admins cannot make changes to admin panel settings. To lock a setting:

    1. Click the arrow to the right of the setting from either "Sharing & data" or "Integrations & development."

    2. Toggle the Lock settings button on/off at the bottom of the page.

      NOTE

      Once a super admin locks a setting, they must select “Apply default to all”  to make all org units match the default setting.

FAQs

Who has admin rights over org members, and what actions can they take?

Only super admins can take actions on behalf of a user account. Those actions include:

  • Deactivating user accounts

  • Signing users out of all sessions

  • Requiring users to sign in with SSO

  • Updating user email addresses

Who has data admin rights, and what actions can they take?

User admins can:

  • Remove users from workspaces, bases, and interfaces

  • Update user permissions on workspaces, bases, and interface

Super and org admins can:

  • Delete workspaces, bases, and interfaces

  • Downgrade workspaces, bases, or interfaces

  • Remove users from workspaces, bases, and interfaces

  • Update user permissions on workspaces, bases, and interfaces

  • Move workspaces between org units

Does Enterprise Hub activity require more than a single Airtable license when used across an entire organization?

No, users only need one license for their activity across the organization. Additionally, collaborating across multiple organizations doesn't require additional user licenses.

In the admin panel, super admins can view licenses according to the user’s maximum permission level across the organization. When viewing specific org units, super admins and org unit admins will see licenses according to the user’s maximum permission level in that specific org unit.

How are users billed when collaborating across multiple org units?

Users only consume one license for their activity across multiple orgs. Airtable does not double bill for users who collaborate on multiple org units. A user’s seat type is reflected across the org.

Can service accounts be upgraded to super admin accounts?

Yes, service accounts can be upgraded to have super admin access.

Can admins allocate different invoices to different cost centers using Enterprise Hub?

Enterprise Hub allows you to centralize billing with a single invoice per organization. Customers can then chargeback from that single invoice to different cost centers. We support internal chargeback workflows in three key ways:

  • SCIM metadata: Super admins may assign cost centers to org members with SCIM metadata. This appears in the Users page of the admin panel and the users CSV download. SCIM may only assign metadata to org members.

  • Org unit membership: Each org member is either a member of an org unit or the default org unit. This will appear in the Users page of the admin panel. This is useful for customers who do not use SCIM and want to determine charge backs based on org unit membership. External users may not have org unit membership.

  • Org unit collaboration: From the users CSV download, we list each org unit where a user is currently a collaborator. This is useful for customers who determine chargebacks based on where users collaborate. Additionally, this helps identify billing accountability for external users.

How do user groups work within Enterprise Hub?

Each user group within an org must belong to a single org unit. When a user creates a user group, it belongs to their member org unit. When displaying the autocomplete, users can view the following groups:

  • User groups that belong to their member org unit

  • User groups where they are a group member

  • User groups that belong to the default org unit

How do org unit memberships work in Enterprise Hub?

What is the license type in admin panel?

The license type (Viewer, Editor)) in the admin panel is primarily used for billing and seat management, reflecting how the user is billed, not necessarily what permissions they hold within specific bases.

Check out our Managing billable collaborators article to learn how to adjust collaborator base permission levels.

What admin panel pages can I access based on my admin role type?

Note

  • Super admins and org unit admins can access all of the category pages listed below.

  • All other roles’ access is individually noted below.

Page

Permissions (Enterprise Scale plans only)

Organization

Super admin (Enterprise Hub only)

Users

Super admin, Org unit admin, User admin

Roles

Super admin, Org unit admin

Groups

Super admin, Org unit admin, User admin

Solutions

Super admin, Org unit admin

Workspaces

Super admin, Org unit admin, User admin

Bases

Super admin, Org unit admin, User admin

Interfaces

Super admin, Org unit admin, User admin

Data sets

Super admin, Org unit admin

HyperDB

Super admin, Org unit admin, Integration admin

Managed apps

Super admin, Org unit admin

Components

Super admin, Org unit admin

Reports

Super admin, Org unit admin

Settings

  • Integration admin can access the “Integrations & development” section,

  • Brand admins can access the “Org resources” section.