---
title: Roles and Permissions
excerpt: ''
deprecated: false
hidden: false
metadata:
  title: ''
  description: ''
  robots: index
next:
  description: ''
---
> ⚠️ Pre-requisite: Please ask your single-sign on (SSO) Admin to follow [these instructions (link)](/docs/moveworks-administration-tools-setup) to configure Moveworks for your organization ([link](/docs/moveworks-administration-tools-setup)) and enable this application for you

MyMoveworks is your one-stop portal to access all Moveworks applications. Within MyMoveworks there are a variety of applications (Moveworks Setup, Analytics, Agent Studio, Knowledge Studio, etc.)

This guide will explain how to grant users access to specific applications.

# Roles and Permissions for Administrators

Moveworks provides Role-based Access Control (RBAC) capabilities for all Moveworks developed applications. As an administrator, learn to manage access to applications through the “Roles and Permissions” application in this section.

There are three types of access you can configure for each user and application:

* **Admin**: A role that can grant or revoke access to a specific licensed app for other users.
* **Super Admin**: A role that can grant or revoke access to all licensed apps for other users. They can also grant or revoke admin access to applications. Moveworks Super Admin has the same access as the bot, bypassing any underlying system/data/API access controls.
* **User**: A role that can access one app. They cannot add or remove access to these apps.

Additionally, some applications like Agent Studio have additional roles controlling access to analytics for that particular application.

You can access Roles and Permissions from your My Moveworks application through your single-sign on (SSO) app homepage or by logging into [https://my.moveworks.com](https://my.moveworks.com).

![](https://files.readme.io/19552cfa5fc494f42b377e5db93db52ca0413f37a517ef6a87746e8d3d415fe0-CleanShot_2025-04-30_at_10.11.26.png)

<br />

**Don’t see Moveworks in your list of SSO applications?** You might not be a super admin or Moveworks app administrator. Request access from your organization's super admin or reach out to the Moveworks Customer Support Team.

**Don’t see Moveworks in your list of SSO applications?** Check that your SSO admin has enabled the application for you.

**Can’t log into[https://my.moveworks.com](https://my.moveworks.com) with your email?** Ensure your SSO admin has granted access to your desired email address.

**Can’t log into[https://my.moveworks.com](https://my.moveworks.com) with your SSO admin?** Ask your SSO admin to Contact support to validate your SSO configuration with Moveworks.

## Standard Administrator and User Roles and Permissions

<br />

<Callout intent="info">
  Important update:

  We are introducing a new role for Analytics. This role is aimed towards allowing admins to govern visibility of all user interactions with the assistant. Read more, on the community post below :

  <Callout intent="note">
    [https://community.moveworks.com/stakeholder%2Dtools%2Dexi%2Dmw%2Dsetup%2Dks%2Danalytics%2D115/product%2Dupdate%2Dnew%2Dinteractions%2Dviewer%2Drole%2Din%2Danalytics%2D2775?fid=115&tid=2775](https://community.moveworks.com/stakeholder%2Dtools%2Dexi%2Dmw%2Dsetup%2Dks%2Danalytics%2D115/product%2Dupdate%2Dnew%2Dinteractions%2Dviewer%2Drole%2Din%2Danalytics%2D2775?fid=115\&tid=2775)
  </Callout>
</Callout>

| Permission                                                                           | Super Admin        | Bot Analytics Admin | Bot Analytics Viewer | Interactions viewer | Agent Studio Admin | Agent Studio User  | Agent Studio Analytics Viewer | Agent Studio Log Viewer | Agent Studio Elevated Logs Viewer | Employee Comms Admin | Employee Comms User | EXI Admin          | EXI User           | Knowledge Studio Admin | Knowledge Studio User | Moveworks Setup Admin | Moveworks Setup User |
| :----------------------------------------------------------------------------------- | :----------------- | :------------------ | :------------------- | :------------------ | :----------------- | :----------------- | :---------------------------- | :---------------------- | :-------------------------------- | :------------------- | :------------------ | :----------------- | :----------------- | :--------------------- | :-------------------- | :-------------------- | :------------------- |
| Add / revoke access to any licensed Moveworks application                            | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| Use any licensed Moveworks application                                               | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| Add / revoke access to assistant analytics                                           | :white_check_mark: | :white_check_mark:  |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| View assistant analytics                                                             | :white_check_mark: | :white_check_mark:  | :white_check_mark:   | :white_check_mark:  |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| View user interactions and feedback                                                  | :white_check_mark: |                     |                      | :white_check_mark:  |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| Add / revoke access to Agent Studio                                                  | :white_check_mark: |                     |                      |                     | :white_check_mark: |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| Access and build on Agent Studio                                                     | :white_check_mark: |                     |                      |                     | :white_check_mark: | :white_check_mark: |                               |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| View analytics for Agent Studio use cases                                            | :white_check_mark: |                     |                      |                     | :white_check_mark: |                    | :white_check_mark:            |                         |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| View run-time logs for Plugins built using Agentic Automation Engine in Agent Studio |                    |                     |                      |                     |                    |                    |                               | ✅                       |                                   |                      |                     |                    |                    |                        |                       |                       |                      |
| Access to sensitive webhook-related logs                                             |                    |                     |                      |                     |                    |                    |                               |                         | :white_check_mark:                |                      |                     |                    |                    |                        |                       |                       |                      |
| Add / revoke access to Employee Comms                                                | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   | :white_check_mark:   |                     |                    |                    |                        |                       |                       |                      |
| Broadcast messages using Employee Comms                                              | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   | :white_check_mark:   | :white_check_mark:  |                    |                    |                        |                       |                       |                      |
| Add / revoke access to Employee Experience Insights (EXI)                            | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     | :white_check_mark: |                    |                        |                       |                       |                      |
| Get insights about help desk and applications using Employee Experience Insights     | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     | :white_check_mark: | :white_check_mark: |                        |                       |                       |                      |
| Add / revoke access to Knowledge Studio                                              | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    | :white_check_mark:     |                       |                       |                      |
| Generate knowledge articles for gaps in knowledge base with Knowledge Studio         | :white_check_mark: |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    | :white_check_mark:     | :white_check_mark:    |                       |                      |
| Add / revoke access to Moveworks Setup                                               |                    |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       | :white_check_mark:    |                      |
| Configure Moveworks bot settings, and manage stakeholder product configurations      |                    |                     |                      |                     |                    |                    |                               |                         |                                   |                      |                     |                    |                    |                        |                       | :white_check_mark:    | :white_check_mark:   |

<Table align={["left","left","left","left","left"]}>
  <thead>
    <tr>
      <th>
        Role Name
      </th>

      <th>
        Description
      </th>

      <th>
        Related Moveworks Product(s)
      </th>

      <th>
        Who fills this role
      </th>

      <th>
        What it gives access to
      </th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>
        Super Administrator
      </td>

      <td>
        Manage permissions for all Moveworks apps and view all products
      </td>

      <td>
        All Moveworks products
      </td>

      <td>
        Moveworks Product Owner
        Lead / Manager
        Project Manager
      </td>

      <td>
        Org Admins can add new Org Admins
        and access all modules in My Moveworks
      </td>
    </tr>

    <tr>
      <td>
        Moveworks Setup Admin
      </td>

      <td>
        Configure all Moveworks products, control connections to various external platforms, and manage permissions to access all configurations
      </td>

      <td>
        Moveworks Setup
      </td>

      <td>
        IT Lead / Manager
        Business Systems Administrator
        Senior IT Technician
      </td>

      <td>
        All Moveworks Setup Modules
      </td>
    </tr>

    <tr>
      <td>
        Moveworks Setup User
      </td>

      <td>
        Configure all Moveworks products and control connections to various external platforms
      </td>

      <td>
        Moveworks Setup
      </td>

      <td>
        Business App Product Owner

        IT Lead / Manager

        IT Project Manager

        Technical Knowledge Writer
        Senior IT Technician
      </td>

      <td>
        All Moveworks Setup Modules
      </td>
    </tr>

    <tr>
      <td>
        Agent Studio Admin
      </td>

      <td>
        Create custom conversational AI use cases, use API keys and connections to external platforms, view analytics for these use cases, and manage permissions to access use cases and connections
      </td>

      <td>
        Agent Studio
      </td>

      <td>
        Moveworks Owner

        Head of Employee Experience

        Software Engineers  
        Developers

        Business Systems Admins

        Business Analysts (for analytics)
      </td>

      <td>
        Agent Studio, Agent Studio Logs, Agent Studio Analytics
      </td>
    </tr>

    <tr>
      <td>
        Agent Studio User
      </td>

      <td>
        Create custom conversational AI use cases, and use API keys and connections to external platforms
      </td>

      <td>
        Agent Studio
      </td>

      <td>
        Head of Employee Experience

        Software Engineers  
        Developers

        Business Systems Admins
      </td>

      <td>
        Agent Studio
      </td>
    </tr>

    <tr>
      <td>
        Agent Studio Analytics Viewer
      </td>

      <td>
        View analytics for your conversational AI use cases
      </td>

      <td>
        Agent Studio
      </td>

      <td>
        Head of Employee Experience

        Business Analysts (for analytics)
      </td>

      <td>
        Agent Studio Analytics
      </td>
    </tr>

    <tr>
      <td>
        Agent Studio Log Viewer
      </td>

      <td>
        View run-time logs for Plugins built using Agentic Automation (Plugins tab) Engine in Agent Studio.
      </td>

      <td>
        Agent Studio
      </td>

      <td>
        Software Engineers  
        Developers

        Business Systems Admins
      </td>

      <td>
        Logs
      </td>
    </tr>

    <tr>
      <td>
        Agent Studio Elevated Log Viewer
      </td>

      <td>
        Provides access to sensitive webhook-related logs. Must be used with Agent Studio Log Viewer.

        Note: Use Agent Studio Elevated Log Viewer only when necessary, as it grants visibility into potentially sensitive webhook payload data.
      </td>

      <td>
        Agent Studio
      </td>

      <td>
        Software Engineers  
        Developers

        Business Systems Admins
      </td>

      <td>
        Grants access to sensitive system logs related to webhook-triggered plugins. Specifically: listener.webhook.trigger, listener.webhook.processor.update, listener.webhook.plugin.trigger
      </td>
    </tr>

    <tr>
      <td>
        Bot Analytics Admin
      </td>

      <td>
        View analytics related to how well your copilot is performing and access fine-grained interactions,  and manage permissions to view analytics
      </td>

      <td>
        Analytics
      </td>

      <td>
        Moveworks Owner

        Head of Employee Experience

        Business Analysts (for analytics)
      </td>

      <td>
        Bot Performance Insights

        Copilot Insights (including Copilot response to each user interaction that summarizes from knowledge base, ingested files, etc)
      </td>
    </tr>

    <tr>
      <td>
        Bot Analytics Viewer
      </td>

      <td>
        View analytics related to how well your copilot is performing and access fine-grained interactions
      </td>

      <td>
        Analytics
      </td>

      <td>
        Moveworks Owner

        Head of Employee Experience

        Business Analysts (for analytics)
      </td>

      <td>
        Bot Performance Insights

        Copilot Insights (including Copilot response to each user interaction that summarizes from knowledge base, ingested files, etc)
      </td>
    </tr>

    <tr>
      <td>
        Employee Experience Insights (EXI) Admin
      </td>

      <td>
        View insights about employee service for help desk owners, and manage permissions to view EXI
      </td>

      <td>
        Employee Experience Insights
      </td>

      <td>
        Moveworks Owner

        Head of Service Desk

        Head of Employee Experience

        Business System Administrators
      </td>

      <td>
        Employee Experience Insights
      </td>
    </tr>

    <tr>
      <td>
        Employee Experience Insights (EXI) Viewer
      </td>

      <td>
        View insights about employee service for help desk owners
      </td>

      <td>
        Employee Experience Insights
      </td>

      <td>
        Moveworks Owner

        Head of Service Desk

        Head of Employee Experience

        Business System Administrators
      </td>

      <td>
        Employee Experience Insights
      </td>
    </tr>

    <tr>
      <td>
        Employee Comms Admin
      </td>

      <td>
        Broadcast custom messages to all or a subset of users in your organization, via the Moveworks bot, and manage permissions to access the Employee Communications platform
      </td>

      <td>
        Employee Communications
      </td>

      <td>
        Moveworks Product Owner

        HR Business Partners

        System Administrators

        Finance Teams
      </td>

      <td>
        Employee Communications
      </td>
    </tr>

    <tr>
      <td>
        Employee Comms Viewer
      </td>

      <td>
        Broadcast custom messages to all or a subset of users in your organization, via the Moveworks bot
      </td>

      <td>
        Employee Communications
      </td>

      <td>
        Moveworks Product Owner

        HR Business Partners

        System Administrators

        Finance Teams
      </td>

      <td>
        Employee Communications
      </td>
    </tr>

    <tr>
      <td>
        Knowledge Studio Admin
      </td>

      <td>
        Generate helpful knowledge articles to fill gaps in your employee knowledge base, and manage access to Knowledge Studio
      </td>

      <td>
        Knowledge Studio
      </td>

      <td>
        Moveworks Product Owner

        IT System Administrators

        Knowledge Base Manager
      </td>

      <td>
        Knowledge Studio
      </td>
    </tr>

    <tr>
      <td>
        Knowledge Studio Viewer
      </td>

      <td>
        Generate helpful knowledge articles to fill gaps in your employee knowledge base
      </td>

      <td>
        Knowledge Studio
      </td>

      <td>
        Moveworks Product Owner

        IT System Administrators

        Knowledge Base Manager
      </td>

      <td>
        Knowledge Studio
      </td>
    </tr>

    <tr>
      <td>
        Moveworks Setup Admin
      </td>

      <td>
        Configure Moveworks bot settings, and manage stakeholder product configurations, and manage access to Moveworks Setup
      </td>

      <td>
        Moveworks Setup
      </td>

      <td>
        Moveworks Product Owner

        IT System Administrators

        Technical System Administrators
      </td>

      <td>
        Moveworks Setup
      </td>
    </tr>

    <tr>
      <td>
        Moveworks Setup User
      </td>

      <td>
        Configure Moveworks bot settings, and manage stakeholder product configurations
      </td>

      <td>
        Moveworks Setup
      </td>

      <td>
        IT System Administrators

        Technical System Administrators
      </td>

      <td>
        Moveworks Setup
      </td>
    </tr>
  </tbody>
</Table>

## Add a Super Admin

1. Click on **Roles and Permissions**.

   ![](https://files.readme.io/9e98c45-image.png)

2. Click on **Add User**.

   ![](https://files.readme.io/f7fc710-image.png)

3. Search for your user by name or email. Check the **Super Admin** toggle, and click **Save**.

   ![](https://files.readme.io/958c8d0fcf963cfb9ba6c10b5d590287bc2fe8b1bc50abbe67ae71b723006c3c-CleanShot_2025-05-02_at_13.49.31.png)

   <br />

4. Changes take effect in under 10 seconds, usually instantaneously.

## Remove a Super Admin

Super Admin access cannot be revoked by other super administrators inside an organization.

Please contact Moveworks Customer Support through the MyMoveworks portal to revoke a super admin. Feel free to use the following template:

```
Hello support,

I would like to revoke superadmin access to user@example.com in my organization.

I understand that only Moveworks and other superadmins in my organization can manage access to applications, and have read our RBAC documentation at /docs/moveworks-administration-tools-setup to understand the consequences of this action.

Thank you
Name
```

## Add an Application Admin

1. Click on **Roles and Permissions**.

   ![](https://files.readme.io/6d809f1-image.png)

2. Click on **Add User**.

   ![](https://files.readme.io/12c420e-image.png)

3. Search for your user by name or email. Check the application toggle you would like to grant administrative access to, and click **Save**.

   ![](https://files.readme.io/be346aabd54f4eabca08b52ced34dd532cc9e66ca634b9aa1f8da44d945fbd0a-CleanShot_2025-05-02_at_13.50.18.png)

   Changes take effect in under 10 seconds, usually instantaneously.

## Remove an Application Admin

1. Click on **Roles and Permissions**.

   ![](https://files.readme.io/76f9ad4-image.png)

2. Search for a user by name or email, and click on the pencil icon to edit permissions for that user.

   ![](https://files.readme.io/58d5da3-image.png)

3. Uncheck the application toggle you would like to grant administrative access to, and click **Save**.

   ![](https://files.readme.io/5c38f4a9a26219b057a63a91760b39135ceec9bf2ae75eea8d4736865bbb9291-CleanShot_2025-05-02_at_13.51.34.png)

Changes take effect in under 10 seconds, usually instantaneously.

<br />

## Add a User to an Application

1. Click on **Roles and Permissions**.

   ![](https://files.readme.io/2321e74-image.png)

2. Click on **Add User**.

   ![](https://files.readme.io/5dc85cc-image.png)

3. Search for your user by name or email. Check the application toggle you would like to grant user access to, and click **Save**.

   ![](https://files.readme.io/423bf5c9e391dba290ea12c4d73a1e98e2d117193b1861348491511258d06808-CleanShot_2025-05-02_at_13.52.05.png)

   Changes take effect in under 10 seconds, usually instantaneously.

## Remove a User from an Application

1. Click on **Roles and Permissions**.

   ![](https://files.readme.io/8a03c7e-image.png)

2. Search for a user by name or email, and click on the pencil icon to edit permissions for that user.

   ![](https://files.readme.io/88b2607-image.png)

3. Check the application toggle you would like to grant user access to, and click **Save**.

   ![](https://files.readme.io/46532622ba0f96f0ca87706ff042a38e64918213777688b4bcc5bd92036a5bae-CleanShot_2025-05-02_at_13.52.05.png)

   Changes take effect in under 10 seconds, usually instantaneously.

## Search for Permissions Assigned to User

You can search for users by name or email to quickly validate permissions for that users.

1. Click on the 🔍 Magnifying Glass icon on the right-hand side to search for a user by name or email.

   ![](https://files.readme.io/3ac34a0-image.png)

2. As you type, the list of users filters down until you match the user you are looking for.

   ![](https://files.readme.io/9a06aaf-image.png)

3. Review the permissions assigned to this user. If the permissions do not match, you can click on the pencil icon and edit permissions for that user.

   ![](https://files.readme.io/aba669f-image.png)

***

# Frequently Asked Questions (FAQ)

1. Can Moveworks view the roles and permissions in my environment or make changes in my environment on my behalf?
   1. Yes – Moveworks uses an administrator account (similar to `moveworksadmin@<domain>.com`) to help you view your configurations, make roles and permissions changes, or take other actions on your behalf in your My Moveworks applications. This service account is automatically inserted into your user roster when you configure Moveworks. This account is not used for any other purposes.
2. Is audit data available when Moveworks makes changes in my environment, or when configuration details are viewed by Moveworks?
   1. Moveworks stores internal logs of all role changes described in the previous section. You can reach out to Moveworks Customer Support team for access to this information.
   2. Audit information for configuration changes in Moveworks setup or extensibility through Agent Studio is available to audit through SFTP. Please read our [SFTP data dictionary](/docs/sftp) to learn more.
3. Do you plan to make audit data available through My Moveworks?
   1. Yes, please upvote [this community idea](https://community.moveworks.com/idea-conversion-moderation-59/audit-logs-for-when-actions-are-taken-152?tid=152\&fid=59) to help the Moveworks team prioritize this feature
4. How long is this data retained by Moveworks
   1. By default, audit logs of role changes are stored for a period of 2 weeks as part of our service logs.
   2. Please read our [data retention deletion policy](/docs/security#data-retention-and-deletion-policy) to learn more
5. Can admins add more admins for their org?
   1. Yes. Org Admins can assign “Org Admin” permissions to other users
6. Is there a maximum number of Org Admins?
   1. There is no limit to the number of users who can be given Org admin permission.
7. What happens if an Org Admin is deactivated?
   1. Other Org Admins will ensure continuity. If no Org Admin is active, please reach out the Moveworks Customer Support Team to provision a new Org Admin.