Give admins and roles

You need team policies turned on.

1. Give a role

1. Open Roles and governance.
2. Change a member’s Role to Admin, or choose New role and tick its Permissions: invite and remove members, create, share, rotate and delete vaults, manage policies, view reports, export the audit log.
3. Give a role that signs changes only to someone whose safety number you verified on their member row.

Only the owner can transfer ownership, delete the team, set up single sign-on, edit roles and change the governance switches. Admins may delete vaults and Deleting a vault needs your approval are the owner’s choice. A deleted vault can be restored for 30 days.

2. Control relaxed policies

Loosening a policy needs your password (and a code with two-factor on), and the owner is told. As owner, in Roles and governance › What admins may do, you can also turn on:

• Relaxing a policy needs your approval, so an admin’s relaxation waits as a proposal.
• Delay before a relaxation takes effect, so the stricter setting stays meanwhile. Members see Stricter setting applies until …, and Cancel this change restores it.

3. Review proposals

A change that needs your approval, or an admin’s change past a daily limit, arrives under Proposals. Accept and sign signs exactly the change shown, against the team as it is now. Decline drops it.