Miro allows for granular permission settings to be configured on both a company and team basis.
In Miro, some settings can only be configured on the company level and affect the entire company. Some permissions are set up on both team and company levels and complement each other. There are also settings that are configured for each team individually.
Relevant for: Enterprise plan
Review and configure settings for the entire company.
Idle Session Timeout
This setting allows Admins to set a limit on how long end-users are allowed to be inactive before logging in again. Customize the Idle Session Timeout periods to help prevent unauthorized access to Miro content and match it with your company's guidelines. When a user hasn't interacted with Miro for the set time, they're automatically logged out of Miro, and they will need to re-login. To set the Timeout limit go to Company settings > Security & Compliance > Authentication > Idle Session Timeout
⚠️ Be mindful when setting timeout limits. Highly secured timeout limits that are too short in duration will result in users continually being logged out, and this might be frustrating to your Miro users. Consider a balanced, secure approach and remember to communicate the timeout limits clearly to your users.
Sharing via embed
Miro boards can be embedded in external applications for working outside of Miro with clients or teammates. The embed sharing allows Admins to enable users to share Miro in specific external apps without the need to enable public access broadly.
Extended Content Admin permissions
Content Admin permissions allow you to supervise all the content within your Enterprise subscription. As a Company Admin, you can seamlessly manage access permissions to boards/projects/templates and clean up the dashboard by deleting boards and projects that are not being used.
Automatically deactivate guests
De-provision guests when their engagement is over to keep teams clean. When guests are not active within the last 30 days, they will be automatically deactivated. Use this setting in combination with the team-level permission that allows inviting guests.
Company & team permissions
Set up permissions for the entire Company and then for specific teams.
Restricting Allowed Domains
You have the option to restrict the sharing of boards to specific domains. To turn this on, go to Company Settings > Security & Compliance > Collaboration and toggle on Restrict allowed domains. Add the list of trusted domains used within your Enterprise subscription. Add the list of trusted domains used within your Enterprise subscription.
To let users invite people to boards as guest collaborators bypassing the allowlist, check the box and click Enable. This allows guests to access a board directly, without being added to a team. They can access the boards but can't create their own ones.
You can also set allowed domains for every team in your Enterprise plan.
Tip: If users had been invited before the setting was enabled, you can verify all users against the allowlist and remove them.
Sharing via a public link
Company and Team Admins can restrict or permit the use of a public link to share boards publicly with view/comment access as well as edit access. If this setting is turned off, the Anyone with the link option disappears from the Share menu of boards in the company or team.
Determine who can invite new members to your Enterprise plan and activate new licenses: Company Admins only, Company Admins and Team admins, or all members.
Company invitation settings complement team invitation settings. This means that Company Admins can allow members and Team Admins to manage team invitations and collaboration, but licenses are controlled by Company Admins.
On the team level, Company Admins can also allow or forbid inviting guests to every individual team.
Team Privacy and Discoverability
Working in a large organization often means that content and users are distributed across multiple teams. Ensure everybody has access to what they need by allowing members of your subscription to see and join relevant teams.
Team Privacy is a company-level functionality that sets the visibility of both teams and users.
Team Discovery is a team-level setting that controls how members of the organization can find and join the team.
Team Discovery has three states:
- Hidden — unless members are invited to the team, they can’t find it
- Members can join after approval — the team is visible and members can request to join
- Open to members — the team is visible and members can join it right away
⚠️ Team Privacy will override Team Discovery set up in team-level permissions.
Allow Co-owner Role
Co-owner is a role that allows board owners to share responsibilities of preparing and facilitating collaboration, whether it’s a live session or asynchronous. Co-owners can perform almost all the actions available for a board owner, from managing board settings to hiding and revealing content - from now on, you will always have a backup in case the board owner is unavailable. Activate the role for the entire company and teams and invite co-owners to your boards and projects.
Board classification helps you get visibility into data created in Miro and ensure the security of your content. When this feature is turned on, Content Admins, board owners, and board editors can assign a visible classification label to each board.
Company Admins can:
- customize the number of classifications as well as texts and colors to match their company policy and the data sensitivity
- define a default classification that is assigned to all new boards in the entire company or specific teams
- add a link to their company's classification policy. The link is visible to end-users on the board when they change the classification
Some team permissions are configured for each team individually and are not affected by Company settings.
Set who can create assets in a team
You can define who can create new boards, projects, and templates in the team: Company Admins only, Company Admins and Team admins, or all members. This is helpful if you need to set up a dedicated team for auto-provisioning or use a team as storage for certain boards.
Board sharing with a team and entire company
Restrict or allow board sharing with the whole team or entire company in one click. If you restrict the sharing options, they will be removed from the Share menu on boards in the team.
Default settings for board and project sharing
Select default sharing settings for all newly created boards and projects in the team: private or available for the whole team or entire company.
Moving boards to other teams
Restrict or allow moving boards to and from the team for all team members.
Board content settings
Define who can copy content on boards stored in the team (only team members or also users outside the team) and set board content permissions for newly created boards.
Learn more about the feature.
Next step: learn how to manage Miro apps and integrations