Users and roles

Choose Admin, Librarian, or Seller access so it is clear who can see advocates, who can change the library, and who can only use proof in a live deal.

Roles keep advocate data in the right hands. Most people should sell with ProvenTen, not administer it.

Default roles

  • Admin — users, SSO, integrations, billing, and workspace settings.
  • Librarian — create and update references, advocates, and consent. No billing or identity settings.
  • Seller — match, request, and use approved proof. Cannot export the advocate list.

Good practice

  1. Keep Admin to a named few. “Everyone is admin” is how consent gets bypassed.
  2. Give enablement or sales ops Librarian, not Admin, unless they also own security.
  3. Review the user list when people leave. Remove access the same day.

Related guides

  • Invite your team

    Invite sales, marketing, and workspace admins with the right role from day one, so advocate data stays limited to the people on your team who need it.

  • SSO and MFA

    Sign in with SSO (single sign-on), require MFA (also called 2FA), and map your identity-provider groups to the ProvenTen roles your team members should have.

  • Workspace settings

    Set the company name, time zone, language, and sharing defaults, plus the workspace switches that change how every seller works day to day in ProvenTen.