Admin and Manager roles

Admin and Manager can both run your organization’s day-to-day security program. Admin also grants access to admin membership management and specific integration and authorization settings.

Choose Manager for someone who runs campaigns, manages employees, and reviews results. Choose Admin for someone who also needs to manage other admins or perform the admin-only actions below.

These are workspace roles. Employee access to assigned training is separate. Available features depend on your organization’s configuration; a role does not enable an unavailable feature.

Compare permissions

Workspace permissions by app area
Action	Admin	Manager
Campaigns and reporting
Create, edit, launch, and discard campaigns	Yes	Yes
View results and export standard reports	Yes	Yes
Download Export for legal review PDFs	Yes	No
People & Groups
Add, import, edit, and archive employees and groups	Yes	Yes
Training
Configure training, enrollments, and reminders	Yes	Yes
Start an LMS sync from the integrations page	Yes	No
Team access
Invite Manager and Viewer members	Yes	Yes
Edit or remove non-admin members	Yes	Yes
Resend an existing Admin’s invitation	Yes	Yes
Invite an Admin or grant or revoke the Admin role	Yes	No
Edit an Admin’s membership details or remove that member	Yes	No
Settings and integrations
Manage general organization settings and integrations, except the restricted actions listed here	Yes	Yes
Authorize or revoke the Microsoft Teams bot	Yes	No
Change deepfake alert settings	Yes	No
Update Workday integration settings	Yes	No
Fetch or download the Outlook add-in manifest	Yes	No
Authorize or check email sending domains	Yes	No
Triage Center
Choose the forwarding sender	Yes	No
Retry a failed report forward	Yes	No

Permissions apply within your organization’s access. Programs and campaigns inherited from a parent organization remain results-only for child organizations, including their Admins.

An Admin must also meet the feature’s organization and configuration requirements. For programs rolled out across multiple organizations, rollout management requires an authorized Admin in the parent organization.

Managing team access

A Manager can invite Manager or Viewer members and manage non-admin members. A Manager cannot promote themselves or another member to Admin, demote an Admin, or edit an Admin’s membership details.

A Manager can resend an existing Admin’s invitation. This sends the invitation to the address already on the account and does not change the member’s role.

Member removal can be blocked when the member owns work or is associated with records that must retain their history. If removal is blocked, contact Jericho Support for help.

When to use Viewer instead

Choose Viewer for someone who needs to review campaigns, people, and reporting without making changes. Viewers cannot create or launch campaigns, manage settings or members, or export report data.

If an action is unavailable to a Manager, ask an Admin in your organization to perform it. Contact Jericho Support if you need help identifying the appropriate access.