The IT Admin role is a dedicated permission level designed for IT teams who need to configure and maintain integrations (such as SSO, SCIM, HRIS, and productivity tools) without requiring Full Admin access.
In this article, you will learn...
Access and availability
⛔️ Required access to Manage People page.
👥 This article is relevant to HR Admins admins.
📦 This feature is available in all pricing packages.
When to Use the IT Admin Role
Use this role when:
- Your IT team needs to set up or troubleshoot integrations
- You want to avoid granting access to sensitive HR data (e.g., reviews, engagement, demographics)
- You want to reduce ongoing coordination between HR and IT
This role follows the principle of least privilege—giving IT exactly what they need, and nothing more.
Permissions
Who can assign this role?
- HR Admins
Availability
- Available on all plans
How it works
- The IT Admin role is assigned to an existing user
- Multiple IT Admins can be assigned at once
- The role can be revoked at any time without affecting active integrations
IT Admin Permissions
What IT admins can and cannot do. The permissions for the IT Admin role are strictly limited to integration and security configuration pages.
| Area | IT Admins Can Access | IT Admins Cannot Access (Out of Scope) |
|---|---|---|
| Integrations |
|
|
| Security & Settings |
|
|
| Employee Data |
|
|
| Detail | Description |
|---|---|
| Who Can Grant This Role | HR Admins |
| Access Type | Limited, purpose-built read/write access for integration and security configuration. |
| Role Type | General Role (assigned on top of an existing active user account). |
| Billable Seat Impact | None. Role assignment does not affect seat billing. |
| Multiple Assignments | Yes, Multiple users can be assigned the IT Admin role simultaneously. |
Note
Access to sensitive employee data always requires HR Admin permissions.
Assign or Revoke the IT Admin Role
- Select 'People' from the navigation menu to open the 'Manage people' page.
-
Use the search bar on the right-hand side of the screen to search for the name of the employee who you want to assign a role to.
- Click on the name of the employee to open their account settings page.
- Scroll down to the 'Permissions' section of the employee's account settings page and check the box next to the roles you want to assign to them.
- Save your changes
Note
Revoking the role does not impact existing integrations—it only removes the user’s ability to manage them. For more details on all permission types, please refer to the main article: Roles and Permissions in 15Five.