Assign admin sub-roles
Admin sub-roles in Atlan are lower-level Admin roles, each scoped to one area of administration. Governance Admin manages personas and policies and can create glossaries; Workflow Admin manages workflows and apps.
Governance Admin and Workflow Admin are admin sub-roles: lower-level Admin roles, each scoped to one area of administration. They're listed under ADMIN in the Select Role panel; the full Admin role keeps control of everything outside those areas. Governance Admin lets a user create and manage personas, purposes, and policies, and create glossaries. Workflow Admin lets a user create and manage automation workflows and apps.
A user can hold only one admin sub-role at a time. Assigning a new sub-role replaces whichever one the user already had. Changing a user's role also signs them out of all active sessions, so they'll need to log back in.
A sub-role's admin rights stop at its own area. Neither sub-role can manage users, configure SSO, or access workspace-level settings; those stay with full Admins.
Prerequisites
- You are an Admin in Atlan. Only Admins can assign sub-roles.
Assign sub-role
- Governance Admin
- Workflow Admin
Governance Admins can create and manage personas, purposes, and metadata policies. They cannot manage users, integrations, connectors, or other workspace settings.
Governance Admins can also create glossaries. This is create-only: editing or deleting a glossary, or adding terms and categories to one, still requires persona-based access to that glossary. Governance Admins manage personas, so they can grant themselves that access in Persona settings after creating the glossary.
-
In your Atlan workspace, click Admin from the left menu.
-
Click Users, then click the role name next to the user you want to promote (for example, Member).
-
In the Select Role panel, choose Governance Admin under ADMIN.
-
Click Update role.
The user can now create and manage personas, purposes, and access policies.
To remove this sub-role, open the same Select Role panel and choose a different role, such as Member.
Workflow Admins can create and manage automation workflows, governance workflows, and apps. They cannot manage access control (personas, purposes, policies), users, or integrations.
-
In your Atlan workspace, click Admin from the left menu.
-
Click Users, then click the role name next to the user you want to promote (for example, Member).
-
In the Select Role panel, choose Workflow Admin under ADMIN.
-
Click Update role.
The user can now create and run workflows, manage approvals, and configure automation triggers.
To remove this sub-role, open the same Select Role panel and choose a different role, such as Member.
Need help?
Contact Atlan Support if sub-roles are not saving or are not behaving as expected.
See also
- Assign roles (overview)
- Role assignment options for SSO users: Default role and group-based options for users signing in via SSO.
- Create a persona: What Governance Admins typically do after being assigned.
- Automate data governance: What Workflow Admins typically do after being assigned.