Assign admin sub-roles
Sub-roles in Atlan let you delegate specific admin tasks to Members without giving them full Admin access. Governance Admin manages personas and policies; Workflow Admin manages workflows and apps.
Governance Admin and Workflow Admin are sub-roles that extend a Member's capabilities for specific tasks without granting full Admin access. Governance Admin lets a user create and manage personas, purposes, and policies. Workflow Admin lets a user create and manage automation workflows and apps.
A user can hold only one admin sub-role at a time. Assigning a new sub-role replaces whichever one the user already had. Changing a user's role also signs them out of all active sessions, so they'll need to log back in.
A Governance Admin is still a Member everywhere except governance settings: they can't manage users, configure SSO, or access workspace-level settings.
Prerequisites
- You are an Admin in Atlan. Only Admins can assign sub-roles.
Assign sub-role
- Governance Admin
- Workflow Admin
Governance Admins can create and manage personas, purposes, and metadata policies. They cannot manage users, integrations, connectors, or other workspace settings.
-
In your Atlan workspace, click Admin from the left menu.
-
Click Users, then click the role name next to the user you want to promote (for example, Member).
-
In the Select Role panel, choose Governance Admin under ADMIN.
-
Click Update role.
The user can now create and manage personas, purposes, and access policies.
To remove this sub-role, open the same Select Role panel and choose a different role, such as Member.
Workflow Admins can create and manage automation workflows, governance workflows, and apps. They cannot manage access control (personas, purposes, policies), users, or integrations.
-
In your Atlan workspace, click Admin from the left menu.
-
Click Users, then click the role name next to the user you want to promote (for example, Member).
-
In the Select Role panel, choose Workflow Admin under ADMIN.
-
Click Update role.
The user can now create and run workflows, manage approvals, and configure automation triggers.
To remove this sub-role, open the same Select Role panel and choose a different role, such as Member.
Need help?
Contact Atlan Support if sub-roles are not saving or are not behaving as expected.
See also
- Assign roles (overview)
- Role assignment options for SSO users: Default role and group-based options for users signing in via SSO.
- Create a persona: What Governance Admins typically do after being assigned.
- Automate data governance: What Workflow Admins typically do after being assigned.