Quip Admin Roles

Site Admin Role

The Site Admin role provides full access to all features of the Quip Admin Console, including:

• Managing all site members — inviting, deactivating, and resetting MFA for any user
• Configuring SSO, SCIM provisioning, and domain settings
• Managing API keys and viewing the Admin Action Log
• Configuring Quip Shield security features (antivirus, EKM, legal hold)
• Updating site settings including company name, subdomain, and banner messages
• Viewing Admin Insights usage analytics across the entire site

Example: The IT administrator at a 2,000-person company holds the Site Admin role. When a department manager leaves, the IT admin deactivates their account, transfers document ownership, and removes their SSO access from the Admin Console — actions that require Site Admin privileges.

Team Admin Role

The Team Admin role is a more limited role designed for team leads or department managers who need to manage their own group's membership without having access to org-wide settings. Team Admins can:

• Invite and deactivate members within their assigned team or group
• View members of their team
• Reset MFA for members of their team

Team Admins cannot access SSO configuration, API key management, security settings, or site-wide analytics.

How to Assign Admin Roles

1. Open the Quip Admin Console and go to Site Members > Enabled Members.
2. Find the user you want to promote.
3. Click on their name to open their profile.
4. Under Admin Role, select either Site Admin or Team Admin.
5. Save the change. The user now has the permissions associated with that role.

Best Practices for Admin Role Assignment

• Limit Site Admin access to IT administrators and a small number of designated backup admins.
• Use Team Admin roles for department managers who need to onboard and offboard their own team members.
• Require all admin accounts to use strong authentication. Site Admins with SSO bypass (direct login) must complete Quip's built-in MFA.
• Review the Admin Action Log periodically to audit changes made by all admin accounts.