> ## Documentation Index
> Fetch the complete documentation index at: https://docs.go.gbgplc.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Grant admin access

> Grant a user full administrative access in GBG GO by assigning the Customer administration role or creating a custom role with all permissions.

Admin access gives a user full control of the GO platform, including the ability to create, update, and publish journeys, and to manage the organisation's users, roles, and departments in the Account management portal.

There are two ways to grant admin access:

* Assign the built-in Customer administration role – the simplest option, and the only role that grants access to the Account management portal.
* Create a custom role with all permissions – use this when you want full GO Platform access without account management, or want a named role for your organisation.

<Warning>
  Only users with the Customer administration role can assign roles or create custom roles. Grant admin access only to users who need it.
</Warning>

## Prerequisites

* You are logged in to GBG GO with the Customer administration role.
* You have identified the department in which you want to grant access.

## Assign the Customer administration role

The Customer administration role is a built-in role that grants full administrative access, including access to the Account management portal. This is the recommended way to grant a user complete admin access.

1. In GBG GO, click **Account management**. The Account management portal opens in a new tab.
2. Sign in to the Account management portal using your GBG GO credentials if prompted.
3. Click **Departments**.
4. Click the name of the department that contains the user. To learn more about managing departments, refer to [Manage departments](/docs/go-v2/platform/account-management/departments).
5. Click the **Users** tab.
6. Click the name of the user you want to grant admin access to. If necessary, type the name or email in the search field to narrow the list.
7. Click the **Roles** tab.
8. Click **Add**. A list of available roles is displayed.
9. Select the checkbox next to **Customer administration**.
10. Click **Add role**. A confirmation is displayed and the role is assigned to the user.

The user now has full administrative access, including access to the Account management portal.

## Create a custom admin access role

If you want to grant full GO Platform access under a named role, you can create a custom role and assign all permissions to it. A custom role does not grant access to the Account management portal. To grant account management access, assign the [Customer administration role](#assign-the-customer-administration-role) instead.

These steps guide you through creating a custom admin access role. After creating the role, you can add all permissions to the role. Then, assign it to users who need full access to the GO platform.

1. In GBG GO, click **Account management**. The Account management portal opens in a new tab.
2. Sign in to the Account management portal using your GBG GO credentials if prompted.
3. Click **Departments**.
4. Click the name of the department in which you want to create the role.
5. Click the **Roles** tab.
6. Click **Add** at the top-right of the screen.
7. From the **Application** list, select the application the role applies to, for example, **GO Platform**.
8. In the **Name** field, enter a name for the role, for example, `admin-access-user`.
9. (Optional) In the **Description** field, enter a description to help other administrators understand the purpose of the role.
10. Click **Add**. The role is created with no permissions assigned.

## Add admin permissions to the role

After creating the role, you need to assign permissions. To create an admin access role, select all available permissions.

1. Under **Features**, click **Add**. A list of available permissions is displayed.
2. Select the checkboxes next to all of the permissions listed in [All available permissions](#all-available-permissions).
3. Click **Add feature permission**. The selected permissions are added to the role.

## Assign admin access role to a user

After creating the role, assign it to the user who needs full access.

1. On the main organisations page in **Account management**, click the **Users** tab.
2. Click the name of the user you want to assign the admin access role to. If necessary, type the name or email in the search field to narrow the list.
3. Click the **Roles** tab.
4. Click **Add**. A list of available roles is displayed.
5. Select the checkbox next to the admin access role you created, for example, **admin-access-user**.
6. Click **Add role**. A confirmation is displayed and the role is assigned to the user.

The user now has full access to the GO platform.

## Remove admin access from a user

To remove admin access from a user, remove the role you assigned:

1. On the main organisations page in **Account management**, click the **Users** tab.
2. Click the name of the user you want to remove the role from.
3. Click the **Roles** tab.
4. Click the horizontal three-dot icon next to the role you want to remove, for example, **Customer administration** or your custom admin access role.
5. Click **Remove**. A confirmation prompt is displayed.
6. Click **Remove** to confirm. The role is removed from the user.

<Warning>
  Make sure at least one user in your organisation keeps the Customer administration role. Without it, no one can manage users, roles, or departments in the Account management portal.
</Warning>

## All available permissions

To create an admin access role, assign all of the permissions listed below.

<Note>
  The permissions available to your organisation depend on the licence granted by GBG. You might not see all permissions listed below.
</Note>

<Accordion title="View all permissions">
  | Permission                           | Description                                                                     | Type    |
  | ------------------------------------ | ------------------------------------------------------------------------------- | ------- |
  | Create filters in journey's session  | Allows the user to create filters when viewing journey session data.            | Create  |
  | Create journey flow                  | Allows the user to create journey flows in the journey designer.                | Create  |
  | Create journeys                      | Allows the user to create new journeys.                                         | Create  |
  | Create notes in journey's session    | Allows the user to add notes to journey sessions.                               | Create  |
  | Create report in Investigation       | Allows the user to generate reports within the Investigation portal.            | Create  |
  | Customer access                      | Grants the user access to customer-facing areas of the platform.                | Access  |
  | Journeys: create brand               | Allows the user to create brand configurations for journeys.                    | Create  |
  | Journeys: create events              | Allows the user to create events within journeys.                               | Create  |
  | Journeys: create form                | Allows the user to create forms.                                                | Create  |
  | Journeys: create image               | Allows the user to upload images.                                               | Create  |
  | Journeys: create translation         | Allows the user to create translations.                                         | Create  |
  | Journeys: read events                | Allows the user to view events associated with journeys.                        | View    |
  | Journeys: update brand               | Allows the user to modify brand configurations.                                 | Update  |
  | Journeys: update form                | Allows the user to modify forms used in journeys.                               | Update  |
  | Journeys: update image               | Allows the user to modify images used in journeys.                              | Update  |
  | Journeys: update organization        | Allows the user to modify organisation-level journey settings.                  | Update  |
  | Journeys: update translation         | Allows the user to modify translations for journey content.                     | Update  |
  | Journeys: view brand                 | Allows the user to view brand configurations for journeys.                      | View    |
  | Journeys: view form                  | Allows the user to view forms used in journeys.                                 | View    |
  | Journeys: view image                 | Allows the user to view images used in journeys.                                | View    |
  | Journeys: view license               | Allows the user to view licence details for journeys.                           | View    |
  | Journeys: view organization          | Allows the user to view organisation-level journey settings.                    | View    |
  | Journeys: view translation           | Allows the user to view translations for journey content.                       | View    |
  | Journeys: view user                  | Allows the user to view user details within the journeys context.               | View    |
  | Publish a journey in Production      | Allows the user to publish a journey to the production environment.             | Publish |
  | Publish draft journey in Preview     | Allows the user to publish a draft journey to the preview environment.          | Publish |
  | Publish draft journey in Production  | Allows the user to publish a draft journey to the production environment.       | Publish |
  | Publish journey in Preview           | Allows the user to publish a journey to the preview environment.                | Publish |
  | Update data retention policy         | Allows the user to modify the organisation's data retention policy.             | Update  |
  | Update journey flow                  | Allows the user to modify journey flows in the journey designer.                | Update  |
  | Update journey-sessions details      | Allows the user to modify details of journey sessions.                          | Update  |
  | Update journeys                      | Allows the user to modify existing journeys.                                    | Update  |
  | View Analytics Menu                  | Allows the user to access the Analytics section of the platform.                | View    |
  | View Customer Audit Menu             | Allows the user to access the Customer Audit section.                           | View    |
  | View data retention policy           | Allows the user to view the organisation's data retention policy.               | View    |
  | View Investigation Menu              | Allows the user to access the Investigation section of the platform.            | View    |
  | View journey flow                    | Allows the user to view journey flows in the journey designer.                  | View    |
  | View journey's session audit         | Allows the user to view audit logs for journey sessions.                        | View    |
  | View journey's session details       | Allows the user to view the details of individual journey sessions.             | View    |
  | View journey's session documents     | Allows the user to view documents submitted during journey sessions.            | View    |
  | View journey's session modules       | Allows the user to view module results for journey sessions.                    | View    |
  | View journey's session notes         | Allows the user to view notes added to journey sessions.                        | View    |
  | View journey's session personal info | Allows the user to view personal information submitted during journey sessions. | View    |
  | View journey's sessions              | Allows the user to view the list of journey sessions.                           | View    |
  | View journey's sessions \[AUS]       | Allows the user to view journey sessions processed in the Australia region.     | View    |
  | View journey's sessions \[EU]        | Allows the user to view journey sessions processed in the EU region.            | View    |
  | View journey's sessions \[US]        | Allows the user to view journey sessions processed in the US region.            | View    |
  | View journeys                        | Allows the user to view the list of journeys.                                   | View    |
  | View modules library                 | Allows the user to view the modules library.                                    | View    |
  | View Preview publishes               | Allows the user to view publish history for the preview environment.            | View    |
  | View Production publishes            | Allows the user to view publish history for the production environment.         | View    |
  | View raw response                    | Allows the user to view raw API response data for journey sessions.             | View    |
  | View Settings Menu                   | Allows the user to access the Settings section of the platform.                 | View    |
  | View system logs                     | Allows the user to view system logs.                                            | View    |
  | View Templates                       | Allows the user to view journey templates.                                      | View    |
</Accordion>

<Note>
  The regional session permissions (View journey's sessions \[AUS], View journey's sessions \[EU], and View journey's sessions \[US]) control access to sessions processed in specific regions. Select only the regions relevant to your organisation's operations.
</Note>