What changed with admin roles?

OffSec has introduced teams, a new admin role, and a new Org Chart page. The main changes are:

• Org Admin is now called Owner. An Owner manages one entity.
• A new admin role is available: Teams Manager.
• Team Admin now manages one team inside an entity.
• Teams are a new level between an entity and its groups. Your existing learners and groups have been placed in a team named Default, which you can rename.
• Org Chart is a new page that shows the structure of your organization.

What are the four levels of my organization account?

An OffSec organization account has four levels:

Why did OffSec update admin roles?

We updated admin role names and permissions to make it easier to understand who can manage the account, who can manage day-to-day learner operations, and who can only view reporting data.

The updated role model helps organizations separate responsibilities such as:

• Managing users and licenses
• Purchasing additional licenses
• Viewing dashboards and reports
• Managing other admins
• Providing reporting visibility to stakeholders without giving them edit access
• Limiting an admin to one team
• Giving selected admins a view across all entities in the organization

What admin roles are available in OffSec?

OffSec admin roles are assigned at the entity, team, or group level.

Did my admin permissions change on my organization account?

If you were an Org Admin on your organization account, you are now an Owner. An Owner has the same full administrative access to their entity that an Org Admin had.

Your learners, licenses, and groups have not been removed. Your existing learners and groups have been placed in a team named Default. You can rename the Default team. If you were a Team Admin, you keep the Team Admin role and now manage the Default team.

Can my entity have more than one Owner?

Yes. An Owner can add another Owner to the same entity. Owners have the highest level of administrative access in their entity, including purchasing licenses and managing other admins.

What can an Owner do?

An Owner has full administrative access to one entity. An Owner can:

• Add, remove, and manage users
• Assign and purchase licenses
• Create and manage teams and groups
• Move learners between teams
• Access dashboards and reports
• Manage learning content
• Add and remove other admins in the entity, including other Owners
• Manage account settings, such as single sign-on, security settings, branding, API keys, and billing
• Access team achievements, assessments, paths, and Talent Finder where available

Note: An Owner role applies to one entity only. To manage another entity, a person needs a role in that entity as well.

What can a Teams Manager do?

A Teams Manager manages the teams, groups, and learners of one entity. A Teams Manager can:

• Create and manage teams and groups
• Add, remove, and manage learners
• Move learners between teams
• Assign and purchase licenses
• Add and remove Team Admins
• Access dashboards and reports for the entity
• Use Organization Settings, Upskilling Preferences, and Assistant Usage for the entity

A Teams Manager cannot add or remove Owners or other Teams Managers. A Teams Manager also cannot manage single sign-on, security and privacy settings, branding, API keys, or billing. These settings stay with the Owner.

What can a Team Admin do?

A Team Admin manages one team. A Team Admin can:

• Invite learners to the team
• Create, rename, and delete groups in the team
• Move learners between groups in the team
• Remove learners from the team
• Assign licenses to learners in the team
• View reports for the team

A Team Admin cannot manage another team, move a learner to a different team, or manage other Team Admins. To move a learner to another team, please contact an Owner or Teams Manager in your entity.

What can a Global Admin do?

A Global Admin is an Owner who can also view every entity in the organization. A Global Admin can:

• See all entities, teams, and groups on the Org Chart page
• View Directory, Licenses, and Teams across all entities. Each entity is shown separately.
• Run the By Courses, By Learning Paths, and By Labs reports for one, several, or all entities

A Global Admin can make changes only in their own entity. All other entities are view-only. Organization Settings, Upskilling Preferences, and Assistant Usage are not available for other entities.

The Global Admin role is available only for organizations with more than one entity. OffSec sets it up for eligible organizations. To request it, please contact your OffSec account team.

What can a Reporting Admin do?

Reporting Admins are intended for users who need visibility into training activity, progress, and outcomes, but should not be able to make account changes. A Reporting Admin can be assigned to an entity, a team, or a group, and can view reports and the Directory for that part of the organization.

Reporting Admins can:

• View the Admin Dashboard
• View the Org Chart for the part of the organization they are assigned to
• View and generate reports
• View team achievements
• View assessments
• Access Talent Finder where available

Reporting Admins cannot:

• Add or remove users
• Assign or purchase licenses
• Manage teams or groups
• Manage learning content
• Change settings
• Manage other admins
• Send external assessment invitations

Who should be a Reporting Admin?

The Reporting Admin role is a good fit for users who need reporting access only. Common examples include:

• A manager who needs to track their team's training progress
• A learning and development partner who needs to generate reports
• A stakeholder who reviews dashboards or training outcomes
• A business leader who needs visibility but should not manage learners or licenses

Can Team Admins create groups and view reports?

Yes. Team Admins can create and manage groups and run reports for their own team, where those features are available on the account.

This allows teams to delegate learner management and reporting tasks without granting purchasing permissions.

Can Reporting Admins create groups or manage learners?

No. Reporting Admins can view reporting information, but they cannot manage learners, groups, licenses, content, or settings.

Can Team Admins purchase licenses?

No. Only Owners and Teams Managers can purchase licenses. This helps organizations separate operational administration from purchasing authority.

Can I limit an admin's access to one team?

Yes. To limit an admin to one team, assign them the Team Admin role for that team.

Do I need to set up teams?

No. Your account continues to work with the Default team. You can create more teams when you want to organize learners by department or function, or when you want to give an admin access to only part of your entity.

Why does my organization have more than one entity?

An organization has more than one entity when parts of the company purchase licenses separately, for example under separate orders or budgets. Each entity keeps its own licenses, learners, and admins.

All entities in your organization appear in your organization structure, including entities that no longer have active licenses. If you would like to combine entities, please contact your OffSec account team.

Does this change my licenses or learners?

No. Teams change how your organization is organized. They do not change your license counts, learner access, or learning progress.

Why does my Org Chart show only part of my organization?

The Org Chart shows only the parts of your organization that your role manages.

• Owners and Teams Managers see their entity, with its teams and groups.
• Team Admins see their team and its groups. The entity name is shown for context only.
• Global Admins see the whole organization and every entity in it.
• Reporting Admins see the part of the organization they are assigned to. They can view it but cannot open the cards. A Reporting Admin assigned only to a group does not have an Org Chart page.

If you need to see more of your organization, please contact an Owner in your entity.

How do I check what type of admin I am?

To view your admin role, follow these steps:

• Go to the Admin Console.
• Select Team Management, and then select Directory.
• Find your name in the list.
• Review the role shown in the Role column.

How do I add a new admin to my organization account?

Invite the person from Team Management > Directory > Invite user, and choose Admin as the role. Admin invitations are sent at the entity level, not at the group level.

To add a new admin, follow these steps:

• Go to the Admin Console.
• Select Team Management, and then select Directory.
• Click Invite user.
• Enter the person's email address.
• Under Role Assignment, select Admin, and then click Next.
• Choose the admin role.
• If you chose Team Admin, select the team the person will manage.
• Follow the prompts to send the invitation.

The new admin receives an email invitation to set up their account.

Note: You can assign only the roles that your own role allows. For example, a Team Admin can invite only Learners to their team. Admin invitations are sent at the entity level, so a Team Admin who needs another admin added should ask an Owner or Teams Manager. An Owner can add another Owner to their own entity.

I received an invitation to become an admin. What should I do?

Follow the instructions in the invitation email. After selecting Accept Invitation, you will be directed to sign in or create an account in the OffSec Learning Platform. If you already have an OffSec account using the invited email address, sign in to accept the invitation. If you are new to OffSec, create your account, confirm your email address, complete your profile, and then access the Admin Console. Your available actions in the Admin Console will depend on the role assigned to you.

How do I change an existing admin's role?

• Go to Team Management > Directory.
• Find the admin you want to update.
• Select the three-dot menu on their row.
• Select Manage roles.
• Under Hierarchy position, choose one role: Owner, Teams Manager, Team Admin, or None. If you choose Team Admin, select the team the person manages.
• Under Additional roles, select any roles that apply, such as Reporting Admin.
• Click Review changes, and then confirm the change.

Role changes take effect immediately.

How do I remove admin access?

• Go to Team Management > Directory.
• Find the admin and select the three-dot menu on their row.
• Select Manage roles.
• Under Hierarchy position, select None, and clear any additional admin roles.
• Click Review changes, and then confirm the change.

The user no longer has admin permissions after their access is removed.

Note: Remove member on the same menu removes the person from your organization, not only their admin role.

Note: The last Owner of an entity cannot be removed. Add another Owner first.

What should I do if I am the only admin and need to give someone else access?

If you are an Owner, you can add another Owner to your entity by following the steps in How do I add a new admin?

If you no longer have access to the only Owner account, please contact OffSec Support for assistance.

What can each admin role access?

Still have questions?

You may email us here and our team will be happy to assist you. Or you may try asking OSCAR - The OffSec Support Chatbot Assistance Resource.

Related articles: Organization Admin Account Guide