Each user in a Zoom account automatically has a system role, which can be owner, administrator, or member. These roles are associated with a default set of permissions, which cannot be changed for the owner or member. These permissions control what users can access when they sign in to the web portal. Role-based access control enables your account to have additional user roles. User roles can have a set of permissions that allows access only to the pages a user needs to view or edit. In addition, you can change the permissions of the admin system role.

Only the account owner can initially create user roles and assign users to those roles. After a user role has been created, the owner (or others in a role with role management permissions) can assign users to that role, granting those users permission to view and edit a subset of pages belonging to the account.

You can see what type of role you currently have on your account profile page. If you are the account owner or admin, you can see what type of role other users have by managing users.

You can also set group admins for groups under your account, which do not affect your account roles. Group admins can manage the members and settings for that group. The group admin can also see if the group they manage is set as the primary group for users within the group. The group admin does not need to be an account admin or have role permissions to edit user groups.

Notes:

• Users can only be assigned a single role (account owner, admin, custom role, or member), but it is possible to be a group admin or be a group admin for multiple groups.
• You can also use role management for Zoom Phone and Zoom Contact Center.

This article covers:

• How to add initial user role management permissions
• How to add additional user roles
• How to add members to roles
• How to change the permissions for a role
  • Manage Dashboard and Reports permissions
  • Manage recording permissions
  • Manage user permissions
• How to delete role members
  • Batch delete role members

Prerequisites for role management

• An Enterprise, Business, Education or Pro plan
• For setting the initial role, you must be the account owner
• Account owner or admin with the privileges or user with role management permissions

Note: Since only the owner can initially add a user role, Zoom recommends that the owner adds a role that allows at least one other person to manage user roles.

How to add initial user role management permissions

To add a role with privileges so that others can add roles:

1. Sign in to the Zoom web portal as the account owner.
2. In the navigation menu, click User Management then Roles.
3. Click Add Role.
4. Specify a name and description for the role, then click Add.
5. Click the checkbox in the Edit column for Role Management.
   Note: This enables users in this role to create and manage user roles so that the Owner is not the only person who can perform this task. You can also click additional checkboxes if you want users in this role to see or edit additional pages.
6. Scroll to the bottom of the page and click Save Changes to return to the Role Management page.
7. At the top of the page, click Back to Roles to return the main Role Management page.
8. Click Edit to the right of the role.
9. Click the Role Members tab.
10. Click Add Members.
11. Enter the email address of the user (if adding multiple, add a comma between email addresses, to separate them).
12. Click Add.

Note: The Role Management role can also be added to an existing role, like Admin for example. 

How to add additional user roles

Only the account owner and users who have edit privileges for role management can add roles and add users to those roles.

To add a role with specific privileges:

1. Sign in to the Zoom web portal as the account owner or user with the privilege to edit account settings.
2. In the navigation menu, click User Management then Roles.
3. Click Add Role.
4. Specify a name and description for the role.
5. Select one or more check boxes to enable permissions for users in this role to see or edit those pages.
6. Scroll to the bottom of the page and click Save Changes to return to the Role Management page.

How to add members to roles

1. Sign in to the Zoom web portal as the account owner or user with the privilege to edit account settings.
2. In the navigation menu, click User Management then Users.
3. Select the check box to the left of the users that you want to assign a role.
4. Click the Change Role button.
   This displays the Change Role dialog.
5. Choose the name of the role to which you want to add users.
6. Click the Save button to return to the Users page.

How to change permissions for a role

You can change the permissions and scope assigned to a role at any time. Admins can manage users, Dashboard, reports, and cloud recordings for meetings and webinars at a group level by defining a custom scope in Role Management.

To change the permissions for an existing role:

1. Sign in to the Zoom web portal as the account owner or user with the privilege to edit account settings.
2. In the navigation menu, click User Management then Roles.
3. Click the All tab.
4. Find the role that you want to change the permissions, then click the Edit button to the right of it.
5. Click the Role Settings tab.
6. Under the View and Edit columns, select the check boxes that enable permissions for users in this role to see or edit those pages.
7. Under the Scope column, click the dropdown menu to select the following:
   • Entire Account: This will enable permissions that will allow your selected role to see and manage groups in the entire account.
   • Custom Scope: When you click Custom Scope, a Custom scope window will appear. You will need to select groups or locations depending on the setting.
     • Standard settings: Search and select 1 or more groups that will be included in this scope. The selected role will only be able to see and manage users in the selected groups.
       In the Custom scope window, click Save to save your changes. The number of selected groups from your custom scope will appear in the dropdown menu that you just edited.
     • Zoom Rooms, Digital Signage, or Workspace Management: Use the location hierarchy to select which locations you want included in the scope. The selected role will only be able to manage the selected locations.
       In the Custom scope window, click Save to save your changes. The number of selected locations from your custom scope will appear in the dropdown menu that you just edited.
     • (Optional) To edit your custom scope, click the dropdown menu then click Edit to make changes.
8. At the bottom of the page, click Save Changes.

Manage Dashboard and Reports permissions

If an admin with only group-level access is viewing a dashboard or report, they will now see a dropdown menu to select the group they want to view. This dropdown menu will not appear if they are only assigned to one group. Instead, they will automatically be viewing the report/dashboard for their one group.

Manage recording permissions 

After a user is assigned to a group, the group admin can see the recording management section of the admin portal. If the group admin manages less than 1,000 users, the recording management page automatically populates with the most recent recordings. If the group admin is managing more than 1,000 users, they will have to refine their search criteria before seeing recordings.

Manage user permissions

If an admin with only group-level access is viewing the Users page under User Management, they will only see and manage users in the selected groups.

How to delete role members

1. Sign in to the Zoom web portal as the account owner or user with the privilege to edit account settings.
2. In the navigation menu, click User Management then Roles.
3. Click the Role Members tab.
4. To the right of the user you want to remove, click the trash button .
5. If a verification dialog displays, click Remove to confirm.

Batch delete role members

1. Sign in to the Zoom web portal as the account owner or user with the privilege to edit account settings.
2. In the navigation menu, click User Management then Roles.
3. Click the Role Members tab.
4. Select the checkboxes of the users you want to remove.
5. Click Remove Selected.
6. If a verification dialog displays, click Remove to confirm.