Summary
Add granular permissions to Custom Roles so that delegated admins can view and edit Team settings across the organization, including Team settings > Board sharing > Public sharing, without being made Company Admins or being added as Team Admin on every team.
Current behavior
- We created a custom role (“E2E admin”) to delegate Teams and user-access administration to a small group, so that Company Admin stays limited to a few members.
- Even with all “Admin roles” and “User and team management” options enabled in the custom role, users cannot see the Settings tab on a Team. Miro Support confirmed this requires being Team Admin on each specific team.
- The Team settings > Board sharing > Public sharing control is available only to Company Admins. Team Admins cannot change it, and no custom role can expose it.
Requested behavior
- Add a custom role permission that grants access to Team settings for all teams (or a selectable set of teams) without requiring Team Admin on each one.
- Add a separate, granular permission for sharing-policy controls, including Public sharing, so it can be delegated independently of full Company Admin rights.
- Show these permissions in the custom role configuration, with clear descriptions of what each one grants.
Business justification
- Least privilege: Company Admin is a broad role, and we need to keep it limited for security and compliance reasons.
- Scalability: Making delegated admins Team Admin on every team is manual, error-prone, and hard to audit as the number of teams grows.
- Operational efficiency: A dedicated team can handle day-to-day Team and sharing configuration without involving Company Admins for every change.
- Governance: Custom roles are meant to enable this kind of delegation, but today they cannot cover Team settings or sharing controls.
