Admins

The user who creates your Twingate network is the only admin user by default. Additional Twingate admin users can be designated in the Admin console. Admin users count toward your license like any other user.

Twingate supports several admin roles, each of which has different permissions in the Twingate Admin Console:

Role	Write capabilities	Read capabilities
Admin	Entire Admin Console	Entire Admin Console
Viewer (formerly Support)	None	All pages except: • Internet Security > Secure DNS • Internet Security > Client Configuration • Settings > Billing
DevOps	Network tab only	All pages except: • Internet Security > Secure DNS • Internet Security > Client Configuration • Settings > Billing
Internet Security	Internet Security tab only	All pages except: • Settings > Billing
Helpdesk	• Resetting user MFA • Verifying/unverifying devices • Verifying/unverifying serial numbers • Adding/deleting serial numbers	All pages except: • Internet Security > Secure DNS • Internet Security > Client Configuration • Settings > Billing
Access Reviewer	Access Requests page only	Access Requests page only
Billing	Settings > Billing page only	Settings > Billing page only

Assigning roles

To set a user’s admin status, click their name in the Users tab, select Manage Role, then choose the desired role as shown below.

Accessing the Admin Console

Admins may log in to the Admin Console at https://your-subdomain.twingate.com using their configured email address and the identity provider or supported social identities for your Twingate network.

Admins with a limited role, such as Helpdesk, will see their role reflected in a badge next to the Twingate logo. Hover over the badge for more about their permissions. If an admin with a limited role attempts to edit a setting their role doesn’t permit, the Admin Console blocks the change and displays the error message below.