MASK Enterprise
Delegated administration.
Assign granular admin capabilities to the right people. Security admin, identity admin, audit admin, and billing admin — each scoped to exactly what they need.
Security Admin
Delegate security policy management — 2FA enforcement, session controls, and SSO configuration — without granting full workspace ownership.
Identity Admin
Manage SSO connections, SCIM directory sync, domain auto-join settings, and user provisioning independently of other admin functions.
Audit Admin
Grant access to audit logs, security events, and retention policy configuration without exposing billing or identity settings.
Billing Admin
Manage subscription, invoices, entitlement overrides, and payment methods without access to security or identity controls.
Included on Enterprise.
Delegated admin controls are available on all Enterprise plans. Start a free pilot to see them in action.
Start a Free Pilot