As a Company Manager, you can manage user permissions in the legacy Company Management portal.

You will manage user permissions in Venn regardless of whether or not you are using a Third-Party Identity Provider.

Edit User Permissions

To edit user permissions in the legacy Company Management portal:

Navigate to login.venn.com and sign in with valid credentials.
You may be required to verify the sign-in by completing the multifactor authentication on your mobile device.
Click Company admin or Manage > Company admin.
Click Directory in the menu at left.
Locate the user in the list and click to open the user detail panel.
In the panel, click Manage User.
The user record will open in a new tab.
Navigate using the tabs at left and locate the field you would like to change. Click Edit at the bottom of the page.
Make any adjustments as needed and click Save changes.

Key User Permissions

In Venn, Company Managers can manage user permissions at the Company, Group, and User levels. To manage permissions at the Group level, you can create and manage user groups.

The permissions outlined in the tables below are managed in the legacy Company Management portal. The legacy Company Management permissions that apply to the user are determined according to this hierarchy:

Company = Default: By default, the Company-level permission will be applied to all users.
Group = Overrides Company: If the user belongs to a group, the Group-level permission will override the Company-level permission. If the user belongs to more than one group, the permission will be applied if it is set for any of the user's groups (using OR, not AND logic).
User = Overrides Group & Company: The User-level permission will override any Company- and Group-level permissions.

Some of the permissions in the legacy Company Management portal are only applicable for legacy versions of the Workplace product. See the tables below for a full list of permissions at the Company, Group, and User levels that apply to Venn's Blue Border.

Permissions that Apply to All Companies

Permission	Description	Available Permission Levels	Instructions and Best Practices
Email Domains	Email domains used by your company	Company (under Email domains)	Email domains must be defined before inviting users to Venn
Allowed Countries / Allowed Countries Override	Controls which countries users can log in to Venn from	Company (under Security options) User (under Security options)	If you would like to restrict access, Allowed Countries are typically set at the Company level and the User permission is set to "Inherit from company," but you can override the company setting by changing a specific user's allowed countries if needed.
Time-based access rights	Restricts the specific hours of the week when users can log in to Venn	Group (under Time-based access rights) User (under Time-based access rights)	By default, the User-level permission will match the Group-level permission, but you can override the group setting by changing a specific user's rights if needed.
IP-based access rights	Restricts which IP addresses users can log in to Venn from	Group (under IP-based access rights) User (under IP-based access rights)	By default, the User-level permission will match the Group-level permission, but you can override the group setting by changing a specific user's rights if needed.
Login disabled / Account disabled	Disables access to the user's account in Venn	User (under Security options)	Learn more about disabling a user account.
Login expires on	Date when the user's Venn account should be disabled	User (under Security options)	This field should be left blank unless the user has a scheduled end date at your company when access should be shut off.
Company manager / Read Only	Gives the user full access to Company Admin If you enable Read Only in addition to Company Manager, these permissions combined give the user access to Company Admin, but hide sensitive user information from their access/edit	User (under Security options)

Permissions that Apply if Venn is Your IdP

Permission	Description	Available Permission Levels	Instructions and Best Practices
Allow forgot password	Allows the user to reset their Venn password themselves using the mobile number associated with their account	Company (under Security options) User (under Security options)	By default, the User-level permission will match the Company-level permission, but you can override the company setting by changing a specific user's authentication method if needed.
Minimum Password Length	Requires users to set a Venn password that meets a specific length requirement	Company (under Security options)
Maximum Password Age / Login password expires on	Requires users to reset their Venn password within a certain timeframe	Company (under Security options) User (under Security Options)	You can set a maximum password age at the Company level, which requires users to reset their passwords when they have had the same password for the number of days specified. The Company-level maximum password age is used to calculate the User-level Login password expiration date. You can manually override or set a specific user's expiration date if needed.
Prohibit the use of previous passwords	Prohibits users from using previous passwords when they reset their Venn passwords	Company (under Security options)
Require two factor authentication	Controls the required two-factor authentication method for the user	Group (under Security options) User (under Security options)	Options: None: No required two-factor authentication SMS: Two-factor authentication is required; a code will be sent to the user's registered mobile number Symantic VIP: Two-factor authentication is required via a third-party app (used infrequently) Sign-in verification: Two-factor authentication is required via the Workplace mobile app Two-factor authentication methods are typically set at the Group level and the User permission is set to "Inherit from groups," but you can override the group setting by changing a specific user's method if needed.

Permissions that Apply if You Use Workplace Drive

Permission	Description	Available Permission Levels	Instructions and Best Practices
Allow/Disable file sharing	Controls whether or not the user has access to file sharing in Workplace Drive	Group (under Basic info) User (under Basic info)	By default, the User-level permission will match the Group-level permission, but you can override the group setting by disabling it for a specific user if needed.
Allow file sharing via public link	Controls whether or not the user can share Workplace Drive files via a public link	Group (under Basic info)
Allow/Disable On-demand Work Folders	Controls whether or not the user can access Workplace Drive files from the Workplace desktop app	Group (under Basic info) User (under Basic info)	By default, the User-level permission will match the Group-level permission, but you can override the group setting by disabling it for a specific user if needed.
Allow/Disable On-demand Work Folders for Mobile Devices	Controls whether or not the user can access Workplace Drive files from the Workplace mobile app	Group (under Basic info) User (under Basic info)	By default, the User-level permission will match the Group-level permission, but you can override the group setting by disabling it for a specific user if needed.
Allow/Disable file uploading	Controls whether or not the user can upload files to Workplace Drive	Group (under Basic info) User (under Basic info)	By default, the User-level permission will match the Group-level permission but you can override the group setting by disabling it for a specific user if needed.
Allow Shared Folders	Controls whether or not the user has access to shared Workplace Drive folders	Group (under Basic info)

Manage Access to Applications, Websites, and Network Resources

Use the links below to learn how to manage the Applications, Websites, and Network Resources available to users in Company Admin:

Manage Venn Policies that Apply to Users

Use the links below to learn how to manage the Policies that apply to users in Company Admin:

Manage User Permissions