The IT admin role

Setting up single sign-on (SSO) usually falls to someone in your IT team, who may never work on a project in Part3. The IT admin role gives that person exactly what they need: they can set up single sign-on and manage your email domains, without a paid seat and without access to change anything else.

In this article we'll cover the following:

• What an IT admin can do
• Add an IT admin
• Change someone's role to IT admin
• IT admins and single sign-on
• FAQ

What an IT admin can do

In Part3, an IT admin "Sets up single sign-on (SSO) and email domains. Otherwise the same as Viewer."

In practice, an IT admin can:

• Manage email domains: add, verify and remove them on Settings → Email domains. See Verify your email domains.
• Manage single sign-on: everything on Settings → Single sign-on, including setting up, testing, editing, turning on and turning off connections. See Set up single sign-on with Microsoft Entra ID.
• See your organization's projects, the same way a Viewer can.

Like Viewers, IT admins are free. You can make someone an IT admin without buying a seat for them. Only Admins and Members use paid seats.

Add an IT admin

Step 1: Go to your Organization → People → Members and select Invite member.

Step 2: Enter the person's name and email.

Step 3: Under the role, choose IT admin. To see what each role can do, select Compare roles.

Step 4: Select Send invite. The person gets an email to join your organization as an IT admin. Until they accept, they show in the list as Invite pending, tagged IT admin and Free.

Change someone's role to IT admin

Step 1: Go to Organization → People → Members, select the gear icon next to the person, then select Change role.

Step 2: In Manage Access, change their role to IT admin and select Update.

If you move someone from Admin or Member to IT admin, they no longer use a paid seat. They also lose the ability to work in projects, so make sure that's what you want.

Only organization admins can give or take away the IT admin role. Anyone else sees "Only organization admins can change the IT admin role."

IT admins and single sign-on

• IT admins need a Part3 password. Before single sign-on can be turned on, every organization admin and IT admin on the domain needs a Part3 password. If an IT admin doesn't have one, they'll be listed under Admins need a password on the turn-on page.
• IT admins keep their password as a backup. Like organization admins, IT admins keep their Part3 password while single sign-on is on. Signing in still goes to Microsoft first. If that fails and Part3 shows an error, they can select Sign in with a password under Continue, then fix or turn off single sign-on.
• IT admins can turn single sign-on on and off, the same as organization admins.

FAQ

Q: I don't see IT admin in the role list.

Only organization admins see the IT admin role, and only once single sign-on is enabled for your organization. Contact support@part3.io to have it enabled.

Q: Can an IT admin be added to a project?

Yes, but only as a Viewer. When you choose IT admin, Part3 reminds you: "This person will only be permitted to have the Viewer role on all of the projects they're added to." If they need to work on a project, change their role to Member.

Q: Who can remove an IT admin from the organization?

Organization admins and billing admins (the people who manage billing for your organization).

Q: Can an IT admin give someone else the IT admin role?

No. Only organization admins can.