Give Zoho administrators only the capabilities needed for their work. A helpdesk colleague who resets employee access does not automatically need control of organisation ownership, every application or all billing decisions.
IN THIS ARTICLE
01 Prepare a role assignment
List the tasks the person must perform, the users or groups in scope, the approver and the review date. Confirm that their individual account has multifactor authentication. Do not assign elevated access to a shared mailbox.
- For a change between User and Administrator, sign in to Zoho Mail Admin Console as the organisation's Super Administrator.
- Review the current predefined roles and their privileges. Where your edition permits custom roles, select the required privileges instead of broadening access to avoid one missing action.
- Open Users, select the named user and use the edit control beside Role. Choose the approved role and select Update. Review specialised administrator privileges before granting a general administrator role.
- Have the new administrator sign in afresh and perform a harmless check, such as viewing the intended user or group.
- Confirm that an unrelated administrative area is unavailable when the role should not include it.
A Zoho Mail organisation has one Super Administrator. Keep that ownership role with the designated owner; it is not an extra everyday helpdesk role. Arrange coverage through other authorised administrators with the required privileges. A transfer of the Super Administrator role is a separate ownership action performed by the current Super Administrator.
02 Plan for absence and departure
Record a second authorised contact who can manage access if the primary administrator is unavailable. Keep recovery information with the organisation's approved custodians. Review role assignments after staff changes and temporary projects, then remove privileges that are no longer required.
Why might a Zoho administrator be unable to perform a task?
Check both role scope and application ownership. An administrator in Zoho Mail may need a separate application role for WorkDrive, Cliq or another Workplace service. Nabtech reseller provisioning and your organisation's administration also have different responsibilities.
When requesting help, name the exact operation, affected organisation and current role. Provide the visible permission error without supplying passwords, recovery codes or session information. A precise task description is more useful than a request to make everyone a Super Admin.