Grant users administrative access to certain areas

As an Adobe Workfront administrator, you can use an access level to grant users with a Plan license administrative access to certain areas of the system.

This is different from giving a user full administrative access to Workfront, which is explained in Grant a user full administrative access.‚Äč

Access requirements

You must have the following access to perform the steps in this article:

Adobe Workfront plan
Adobe Workfront license
Access level configurations

You must be a Workfront administrator.

NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels.

Grant Plan users administrative access to certain areas of Workfront

We strongly recommend that you leave the built-in access levels unchanged so that you can refer to them after you set up your users. To customize an access level, copy the default access level and modify the copy. (You can do this for every access level except for System Administrator and External User.)
  1. Click the Main Menu icon in the upper-right corner of Adobe Workfront, then click Setup .

  2. In the left panel, click Access Levels.

  3. Click the name of the access level you want to use to grant users administrative access to certain areas of Workfront.

  4. In the Allow administrative access for section, check boxes to grant the necessary administrative access.

    These options allow you to grant the following capabilities:

    table 0-row-2 1-row-2 2-row-2 3-row-2 4-row-2 5-row-2 6-row-2 7-row-2 8-row-2 layout-auto html-authored no-header
    Approval Processes

    Create and manage approval processes for use throughout the system and for specific groups.

    Without this access, users can create only ad-hoc approval processes on items they have access to manage.


    Add new and edit existing companies in Workfront

    Without this access, users can only view existing companies.

    Custom forms

    Create and edit (add, edit, and delete the fields) custom forms within their group.

    Without this access, users can only attach existing forms to objects where they have access to contribute or manage.

    Exchange rates

    Add new currency in Workfront.

    Without this access, the user can only add an existing currency to a project they create.


    View all expenses on objects in Workfront.

    This does not allow the user to create new Expense Types.

    Without this access, the user can only view the following:

    • Expenses on projects, tasks or issues they manage
    • Their own expenses
    • The expenses of their subordinates
    Job roles

    With this access, the user is allowed to do the following:

    • View and edit existing job roles
    • Add new job roles
    • Edit role billing and cost rates

    IMPORTANT: If you grant a Planner user administrative access to job roles, the Financial Data access setting Edit Role Billing & Cost Rates is enabled for the user automatically. Later, if you disable administrative access to job roles for the Planner user, job roles are still visible to the user because the Edit Role Billing & Cost Rates setting is still enabled. If this happens and you need to remove the user's access to view job roles, you need to disable the user's Edit Role Billing & Cost Rates permission setting. For instructions, see Grant access to financial data.

    Milestones in my group

    View all the milestone paths in the system under the Milestone Paths menu in Setup. Users can also edit or delete any milestone paths belonging to any of their groups. Users cannot manage (edit or delete) the milestone paths that are not assigned to any of their of groups.

    Without this access, users can only view existing milestone paths and apply them to projects they have access to manage.

    Reminder notifications Create and manage reminder notifications in Workfront.
    Without this access, users are limited to receiving and viewing notifications.
    Timesheets & hours

    Allows users to view to all hours and timesheets in Workfront.

    When this option is disabled, users can view only hours on:

    • Projects, tasks, or issues they manage
    • Their own timesheet
    • A timesheet of someone that reports to them
    • A timesheet that they approve


    Whether this option is enabled or disabled, group administrators can create timesheet profiles for the groups and subgroups they manage and assign them to group members whose user profiles they have access to edit.

    Enabling this option might provide too much access for some group administrators because they can view the timesheets generated by timesheet profiles (and the hours) for all users in the system, not only for those in the groups they administer. You can disable this option for group administrators who don't need this much access.

  5. When you are finished, click Save.

  6. Assign the new access level to a user, as described in Add users.

    note note
    You can allow users to have administrative access to users. For more information about giving users administrative access to users so they can manage user accounts, see Grant access to users.