Zoho Mail Roles and Privileges

The roles available in Zoho Mail are Super Administrator, Administrator, and User roles. The members of the organizations can assume different roles in Zoho Mail, based on the requirement. 

The Email Super Administrator is by default the user who signs up and sets up the domain in Zoho Mail. The users are end-users, who just need to access the Mail, and do not need any admin capabilities like adding users and so on. The Administrator is a role provided to a user, who needs to manage users in the organization, in addition to the Super Administrator.

The Super Administrator can provide Administrator privileges to other users or change the Super Administrator of the organization to another Administrator in the Organization.

Change Role of a Zoho Mail Member

You can change the Role of any user to admin and admin to a user.

1. Log in to Zoho Mail Admin Console.
2. Navigate to Users in the left pane, and click on the user you want to change from User to Admin.
3. Under the Role option, click the Edit icon and select the role you would like to assign
4. Once done, click Update.
   

Change Super Admin

Even though the Super Admin, by default, is the user who initially set up your organization, it can be changed.

To change an Admin to Super Admin, follow these steps:

1. Log in to Zoho Mail Admin Console.
2. Select Security & Compliance in the left pane, and choose Roles and Privileges.
3. Navigate to Roles and click Super Administrator.
4. Click Change Super Administrator.
5. A pop-up window will list all the Admins under your organization. Click Change next to the member you would like to assign as super-administrator.
   
6. Authenticate with your password and click Assign.
   
7. You'll be prompted to re-authenticate your session to verify your identity for security reasons.
8. Once done, the role of Super Administrator will be assigned to the selected user.

Once you choose a different super admin, the previous super admin's role will change to Admin.

Privileges

Super Administrator

By default, the user who signs up first and creates the organization will be assigned as the Super Administrator. There can only be one Super Administrator and has the utmost privileges across the entire organization.

Exclusive privileges of Super Administrators:

• Change the role of a User to Admin and vice versa
• Change an existing administrator to a Super Administrator
• Change your Organization's Logo and Name

Administrators

The members with the Admin role can manage all aspects of the organization except for the exclusive privileges of the super administrator. There's no limit on the number of administrators.

Apart from general Administrators, you can also have custom administrators who will have access to manage only specific parts of your Zoho Mail Admin Console.

• User Management Admin
  The User Management Admin has the privilege to add new users to your organization, delete users, configure user settings, and change passwords.
• Spam Control Admin
  The Spam Control Admin can manage your organization's spam settings like adding Allowed List and Blocked List, action to be taken in case of SPF, DKIM, DMARC, and DNSBL failure, among others.
• Helpdesk Admin
  The Helpdesk Admin can access Audit Logs, Block/Unblock accounts, send or delete bounced emails, add email recovery options, and so on.
• Marketplace Developers
  Marketplace Developers of your organization can build applications using Developer Space. Super Administrator will have the Developer rights by default.
• Quarantine Admin
  The Quarantine Admin manages quarantined emails within the organization, including actions like delivering, denying, or exporting quarantine emails for both incoming and outgoing emails. 

Group Privileges

You can allow or restrict privileges on Organization Groups and Personal Groups depending on your enterprise policy. To access Group privilege settings,

1. Log in to Zoho Mail Admin Console.
2. Navigate to Security & Compliance in the left pane.
3. Select Privileges under Roles and Privileges.

You can set the restriction levels separately for both Organization and Personal Groups.

Organization Group Privileges

• Allow organization group creation: When disabled no member (admin or super admin) of your organization can create an Organization group.
• Who can create organization group?
  • Super Administrator only: No one apart from the super admin of your organization can create the group.
  • Administrator only: No one apart from the admin and super admin can create the group.
  • All users: Anyone—super admin, admin, or members—from your organization can create the group.

Personal Group Privileges

• Allow personal group creation: When disabled no member (admin or super admin) of your organization can create a personal group.
• Allow personal groups with external users: When enabled, external members who are not part of your organization can be added to the personal groups.
• Who can create personal groups?
  • Super Administrator only: No one apart from the super admin of your organization can create the group.
  • Administrator only: No one apart from the admin and super admin can create the group.
  • All users: Anyone—super admin, admin, or members—from your organization can create the group.