Understand Enterprise Guard admin roles and their privileges

Enterprise Guard capabilities are controlled through admin privileges. These privileges can be granted through predefined admin roles or through custom admin roles configured with the required privileges.

The following table lists the available privileges for each feature and shows which predefined admin roles include them by default. When creating custom admin roles, Company Admins can assign these privileges to grant access to specific Enterprise Guard capabilities.

The following table lists the detailed privileges and admin role matrix for each feature.  

Detailed privileges and predefined admin role matrix for each feature

NOTE: Enterprise Guard capabilities can be granted through predefined admin roles or through custom admin roles configured with the required privileges.

Assign an Enterprise Guard admin role

✏️ To assign an Enterprise Guard admin role to a user, you must be a Company Admin.

1. Go to your profile settings:

   • From a board: Main menu > Preferences > Profile settings.

   • From the dashboard: Click your avatar in the top-right corner and click Settings.

   • From the URL: Go to https://miro.com/app/settings, and choose your Company from the list in the top-left corner.

2. Under User management, click Admin roles.

3. In the right pane, find the admin role you want to assign (for example Data Governance Admin, Sensitive Content Admin, or eDiscovery Admin).

4. Click the ellipsis (… ) next to the role and select Assign role.

5. Choose the user to whom you want to assign the role.

6. Scroll to the bottom of the window and click Assign.

Custom admin roles for Enterprise Guard

Custom admin roles allow Company Admins to grant access to individual Enterprise Guard capabilities without assigning broader administrative roles. This enables organizations to tailor access based on internal governance, security, or compliance responsibilities.

When creating or editing a custom admin role, Company Admins can select the privileges that determine which Enterprise Guard capabilities the role can access and manage. These privileges span multiple Enterprise Guard domains, such as Data classification, Data discovery, Content lifecycle management, eDiscovery.

By assigning only the required privileges, organizations can delegate administrative tasks, such as reviewing sensitive content findings, managing classification settings, configuring lifecycle policies, or accessing eDiscovery tools, to the appropriate teams. The table below lists privileges that can be assigned when configuring custom admin roles.