Enterprise Scale | |
Permissions | Super admins can/have:
|
Platform(s) | Web/Browser, Mac app, and Windows app |
Related reading |
Enterprise Hub in Airtable overview
Enterprise Hub is a central home base for IT admins to manage Airtable usage across multiple company levels.
Enterprise Hub offers a flexible way to represent a company’s existing structure via organizational units (org unit). With unlimited organizational units underneath their central organization, customers can create dedicated locations for workspaces of different divisions and departments.
Using org units in the admin panel
Note
Org units have unique enterprise account IDs, meaning orgs with Enterprise Hub enabled have multiple associated enterprise accounts — one for the overall org and one for each org unit.
Org units add an extra layer of structure within organizations. Workspaces and organization members are assigned to org units. Super admins may create unlimited org units, providing flexibility to represent divisions, departments, projects, etc.
Org unit types:
Workspaces: Every workspace within an organization must belong to an org unit. Bases and interfaces within the workspace also belong to the org unit. Workspaces may only belong to one org unit.
Org unit membership: Every organization member must belong to an org unit (org unit member). Users may be members of multiple org units. Org unit members create workspaces within their org unit. Org unit membership is not required to collaborate on workspaces, bases, and interfaces that belong to an org unit.
Org unit group: Each org unit member belongs to a user group that represents the entire org unit. Users may share workspaces, bases, and interfaces with this group to provide broad visibility and access to all org unit members.
Default org unit: If an organization member does not belong to an org unit, they are “unassigned” and become a member of the default org unit.
To create an org unit:
Note
Super admin permissions are required to create org units.
Open your admin panel.
Click Organization.
Click + Create organizational unit.
Enter your preferred org name and click Create.
To assign a user to an org unit:
Open your admin panel.
Click Users.
Select the user's name you want to assign to the org unit.
Expand the dropdown to the right of the user’s name below the “Org unit” column.
From the dropdown, search for and locate the preferred unit org for your user.
To assign a service account
Open your admin panel.
Click Users, then Service accounts.
Select the checkbox next to the account you want to assign to a service account.
Click the … icon at the end of your selected account’s row.
Click Move service account.
Click the ˅ icon, then search for and select your preferred org unit.
Click Move service account.
Org membership and default org units
Note
Org unit admins can only assign users to org units where they are an org unit admin.
Organizations with Enterprise Hub must have domain capture enabled. This means that all Airtable users with verified emails that match one of their organization's email domains become organization members. When an organization is on enterprise hub we will automatically create the default org unit for your organization. If an organization member has not yet been assigned to an org unit, they are “unassigned” and become members of the default org unit. When on-domain users first sign into Airtable they belong to the default org unit, until they are assigned to another org unit.
Admin roles in Enterprise Hub
Admin (Super admin in Enterprise Hub): Access to all admin panel functionality, including administrative rights over users and workspaces in the organization, and all settings.
Org unit admin (Enterprise Hub only): Access to all admin panel functionality in the org unit, including administrative rights for workspaces and user permissions on their org units.
User admin: Manages users (including licenses) and groups. Manages workspace, base, and interface permissions.
Integration admin: Manages integration settings, including HyperDB.
Brand admin: Manages organization branding settings and resource.
Admin panel settings
Note
The "Security & compliance" section of the "Settings" section in the admin panel is only visible and editable by super admins. These settings and configurations apply to your entire org, not just individual org units.
To open your admin panel settings:
Open the admin panel.
Click Settings.
Included in the "Sharing & data" and "Integrations & development" pages of "Settings," super admins can view and establish the default settings applied to all org units. All new org units will also inherit these settings once created. Super admins may set different settings for each org unit. The default org unit settings always equal the org's default settings.
Super admins can pass on the responsibility of setting their organization's administration to their org unit admins. For each setting, super admins can set it to set the administration of org units to org unit admins. For each of these settings, the super admin can set it to:
Unlocked: Org unit admins may override the org defaults for their specific org unit.
Locked: Org unit admins cannot make changes to admin panel settings. To lock a setting:
Click the arrow to the right of the setting from either "Sharing & data" or "Integrations & development."
Toggle the Lock settings button on/off at the bottom of the page.
NOTE
Once a super admin locks a setting, they must select “Apply default to all” to make all org units match the default setting.
FAQs
Who has admin rights over org members, and what actions can they take?
Only super admins can take actions on behalf of a user account. Those actions include:
Deactivating user accounts
Signing users out of all sessions
Requiring users to sign in with SSO
Updating user email addresses
Who has data admin rights, and what actions can they take?
User admins can:
Remove users from workspaces, bases, and interfaces
Update user permissions on workspaces, bases, and interface
Super and org admins can:
Delete workspaces, bases, and interfaces
Downgrade workspaces, bases, or interfaces
Remove users from workspaces, bases, and interfaces
Update user permissions on workspaces, bases, and interfaces
Move workspaces between org units
Does Enterprise Hub activity require more than a single Airtable license when used across an entire organization?
No, users only need one license for their activity across the organization. Additionally, collaborating across multiple organizations doesn't require additional user licenses.
In the admin panel, super admins can view licenses according to the user’s maximum permission level across the organization. When viewing specific org units, super admins and org unit admins will see licenses according to the user’s maximum permission level in that specific org unit.
How are users billed when collaborating across multiple org units?
Users only consume one license for their activity across multiple orgs. Airtable does not double bill for users who collaborate on multiple org units. A user’s seat type is reflected across the org.
Can service accounts be upgraded to super admin accounts?
Yes, service accounts can be upgraded to have super admin access.
Can admins allocate different invoices to different cost centers using Enterprise Hub?
Enterprise Hub allows you to centralize billing with a single invoice per organization. Customers can then chargeback from that single invoice to different cost centers. We support internal chargeback workflows in three key ways:
SCIM metadata: Super admins may assign cost centers to org members with SCIM metadata. This appears in the Users page of the admin panel and the users CSV download. SCIM may only assign metadata to org members.
Org unit membership: Each org member is either a member of an org unit or the default org unit. This will appear in the Users page of the admin panel. This is useful for customers who do not use SCIM and want to determine charge backs based on org unit membership. External users may not have org unit membership.
Org unit collaboration: From the users CSV download, we list each org unit where a user is currently a collaborator. This is useful for customers who determine chargebacks based on where users collaborate. Additionally, this helps identify billing accountability for external users.
How do user groups work within Enterprise Hub?
Each user group within an org must belong to a single org unit. When a user creates a user group, it belongs to their member org unit. When displaying the autocomplete, users can view the following groups:
User groups that belong to their member org unit
User groups where they are a group member
User groups that belong to the default org unit
How do org unit memberships work in Enterprise Hub?
Learn more by reviewing our Enterprise Hub:Org unit assignment with user groups article and our Managing how users are added to org units content.
What is the license type in admin panel?
The license type (Viewer, Editor)) in the admin panel is primarily used for billing and seat management, reflecting how the user is billed, not necessarily what permissions they hold within specific bases.
Check out our Managing billable collaborators article to learn how to adjust collaborator base permission levels.
What admin panel pages can I access based on my admin role type?
Note
Super admins and org unit admins can access all of the category pages listed below.
All other roles’ access is individually noted below.
Page | Permissions (Enterprise Scale plans only) |
|---|---|
Super admin (Enterprise Hub only) | |
Super admin, Org unit admin, User admin | |
Roles | Super admin, Org unit admin |
Super admin, Org unit admin, User admin | |
Super admin, Org unit admin | |
Super admin, Org unit admin, User admin | |
Super admin, Org unit admin, User admin | |
Super admin, Org unit admin, User admin | |
Super admin, Org unit admin | |
Super admin, Org unit admin, Integration admin | |
Super admin, Org unit admin | |
Super admin, Org unit admin | |
Super admin, Org unit admin | |
|