About

As the administrator of a Virtru team, you can use the Virtru Control Center's Users & Groups page to promote and demote admins for your team. For adding and removing users, see Managing Users.

To learn more about how to leverage the Virtru Control Center, we also recommend our Virtru Control Center Playbook for Administrators

Please Note: The Users & Groups page will vary slightly depending on your account configuration. This article will cover the differing ways to manage your team, whether you are managing users manually or via a Google Workspace, Entra ID (formerly Azure AD), or On-Prem AD sync.

Managing Admins for Manually Managed Teams

To view and manage a user's administrative role, simply click on the user's email address. This will display their current status and provide a toggle to adjust their role.

Super Administrator toggle

Note: if a user has not accepted their invitation, they cannot become an admin:

User Has Not Accepted Invitation prompt

Managing Admins for Synced Teams

In addition to Super Administrator status with all privileges, users in synced orgs can receive specific administrative privileges. To manage these privileges, simply click on the user's email address. This will display their current status and privileges, and for applicable users, allow you to manage specific permissions.

Super Administrator Status

By default, for Google Workspace and Entra ID synced orgs, Virtru Super Administrators will mirror the admins in the Workspace and Entra ID directories, respectively. Manual modification is not enabled.

Locked non-Admin user

By request, an existing admin can reach out to Virtru support to disable admin mirroring. This allows for manual management of Virtru Super Administrators.

Virtru admin permissions modal

For On-Prem AD synced orgs, Virtru admin status is determined via the AD's Virtru admins group.

Active Directory admin with Admin privileges in Virtru Control Center

Granting Administrative Privileges to End-Users

For synced orgs, non-admin end-users can still receive some Administrative Privileges. To assign these privileges, click on the email address of a user you wish to modify and select the permissions you wish to grant.

non Virtru admin with admin privileges view

Users can also be granted administrative privileges over specific OUs and/or Groups. To do so, click Add OU or Group, select one of the two, select one or more in that category, and click Add.

providing permissions over OU or group to user

If a user is a member of a group that has been granted administrative privileges (more details below), they will inherit the privilege(s). Inherited privileges will be locked on the user's privilege menu with an indication of the source:

inherited priveleges on user modal

Granting Administrative Privileges to Groups

In addition to setting administrative privileges on an individual basis, Virtru admins can grant privileges to entire groups which will be inherited by all members of that group (as defined in your mail server per the most recent sync). To assign these privileges, navigate to the Groups tab and click on the group email address of a group you wish to modify. Then, select the permissions you wish to grant.

modal to apply group permissions

Groups can also be granted administrative privileges over specific OUs and/or other Groups. To do so, click Add OU or Group, select one of the two, select one or more in that category, and click Add.

modal to apply permissions over groups and ou to group email address

Inherited privileges will be locked on the member users' privilege menu with an indication of the source.

inherited priveleges on user modal.png