Available on Asana Starter, Advanced, Enterprise, and Enterprise+ tiers, as well as legacy tiers Premium, Business, and Legacy Enterprise.
Visit our pricing page for more information.
In Asana there are two organization-wide admin roles - admin and super admin. Admins have access to user and team management features as well as security settings for individual users. Super admins have access to the full set of admin features as well as security settings for the entire organization.
As super admins can oversee organization-wide security features, the super admin role should be given to an IT administrator. The first super admin for an organization must go through a verification process. Once verified, super admins can then also give others super admin status without verification. This process restricts access to critical security settings to a limited number of users.
Only organization members can hold admin or super admin roles; guests cannot.
Note
Asana also supports team admins, though they do not have organization wide control, so are not discussed in this article. Learn more about team admins here.
If you need to access additional controls, proceed with the super admin verification process.
Super admins are usually IT administrators of an organization. They oversee capabilities such as SCIM and organization-wide password reset.
Admins tend to be IT helpdesk or business leaders. They can access individual password reset and custom branding, as well as user- and team-management features.
Note
Like what you see? Get started with a free Asana trial today. Try for free

Super admins of organizations can enable on or disable Asana AI features as outlined here. Admins of organizations that do not have any super admins can disable these features, but cannot enable them again. To enable them, you will need to complete the super admin verification process or contact the Support team. A warning banner will be displayed in-product before an admin makes this change. This also applies to divisions in Asana as divisions do not have super admins. In order to enable Asana AI features for a division, a division admin would need to complete the super admin verification process and become a super admin of the organization.
You can view and manage admins and super admins directly from the Admin console.
This list shows the people in your organization who currently hold admin or super admin roles.

From the same Members page, you can change roles, downgrade admins or super admins, or remove them from your organization.
Your options depend on whether the person is currently a member, admin, or super admin, and whether they meet the requirements to hold an admin or super admin role.

Use this section when you want to change who is an admin in your organization or adjust an existing admin’s role.
To change an admin:
If you change someone from admin or super admin to member, they will lose access to the admin console and any admin-only settings.
You can make someone an admin when you invite them or by updating the role for an existing member.
To add an admin from the Members page:
Only organization members are eligible to become admins. Guests cannot be admins.
The first super admin in your organization must complete a verification process that proves control of your organization’s domain. After at least one person is verified as a super admin, they can add additional super admins without repeating the verification.

In most cases, you will not need a super admin in your domain; if you do, you’ll see a message in the admin console that will guide you through verification. If you would like to pre-verify, you can do so by navigating to the admin console and clicking the Security tab, then click Admin Access and select to add a new super admin.
To protect the security and privacy of your company’s data within Asana, we require the first super admin in an organization to complete a verification process. This involves demonstrating the ability to modify the DNS records associated with the domains associated with your company’s Asana. Specifically, we will ask you to add a TXT record in a way that does not impact the operation of your website but does prove your ownership.
Note
In organizations, only the first user wishing to become super admin must undergo this verification process. That super admin can then add additional super admins once verified. DNS records can be deleted after verification.

To add your organization’s first super admin, click the Add a super admin button in the Admin Access section of your Security page in the admin console.

Note
If unsuccessful, you will be shown an error message and a link to contact our support page. Verification attempts expire after one week.
In organizations, super admins can add other super admins

To add additional super admins, click the Add a super admin button in the Admin Access section of your Security page in the admin console
You can remove someone’s admin or super admin access by changing their role. You can also remove them from your organization entirely.
To downgrade an admin or super admin:
To remove someone from your organization:
Removing or downgrading someone changes what they can access. After this change, they lose any admin-only permissions and their access is updated based on their new role.
Only organization members can be admins or super admins. Guests cannot hold either role.
The first super admin in an organization must complete domain verification before they can enable certain security controls or add more super admins. Once verification is complete, that super admin can add additional super admins without repeating the verification process.
If your company uses identity providers or SCIM, make sure your internal process for assigning admin and super admin roles matches how you want those roles to appear in Asana.
If your organization uses division plans, there are important considerations when managing super admin access.
With division plans, you pay for a subset of your organization rather than the full organization. Division admins can only see and manage members within their paid division, even after completing the super admin verification process.
Division admin console access: Super admins on division plans access the division admin console, not the organization admin console
Limited member visibility: You can only view and manage users who are part of your paid division
Expected behavior: Users outside your division (including those on free plans or other paid divisions) will not be visible in your admin console
The most straightforward approach is adding someone who is already a member of your paid division.
If the person you want to designate as super admin is currently in a different division:
To view the admins for your organization:
Admins can manage individual users and teams, reset individual passwords, and configure custom branding, while super admins can additionally manage organization-wide security features like SCIM and organization-wide password resets.
No, only organization members can hold admin or super admin roles—guests cannot be assigned either role.
Yes, the first super admin must complete a DNS verification process by adding a TXT record to prove control of the organization's domain, though additional super admins can be added afterward without repeating verification.
No, division admins can only view and manage members within their paid division, even after completing super admin verification—users outside their division remain invisible in the admin console.
Note
Find best practices for admins shared in the forum.

These cookies are strictly necessary to provide you with certain features. For example, these cookies allow you to access secure areas that require registration and set your privacy preferences. Because these cookies are essential to providing services to you, they cannot be disabled. You can set your browser to block or alert you about these cookies, but it may cause some parts of the site to not work.
Third party trackers collect information used for analytics and to personalize your experience with targeted ads. Under the Virginia Consumer Data Protection Act, you have the right to opt-out of the sale of your personal data to third parties. You also have the right to opt out of targeted advertising related processing. You may exercise your right to opt out of the sale of personal data and targeted advertising by using this toggle. If you opt out, we will not be able to offer you personalized ads and we will stop sharing your personal information with third parties. For more information please see our Privacy Statement.
These cookies allow us or our third-party analytics providers to collect information and statistics on use of our services by you and other visitors. This information helps us to improve our services and products for the benefit of you and others.
These cookies, provided by our third-party advertising partners, collect information about your browsing habits, as well as your preferences for various features and services. They also provide us with auditing, research, and reporting to know when advertising content has been displayed and how successful the content has been. This information allows us and our third-party advertising providers to display relevant advertising content.
These cookies provide enhanced functionality, providing chat support, allowing you to more easily complete forms, personalizing content to your preferences, and selecting your communications preferences. If you do not enable these cookies, or choose to disable them in the future, that could impact your ability to use certain features.