Roles and Permissions

E-SignSeal uses four roles to control who can create templates, send contracts, and sign. Roles stack: a user with the Sender role can also sign any envelope they are invited to. A Workspace Admin can perform every action in the app.

Permissions tab in E-SignSeal Settings showing role assignments

Role definitions

Workspace Admin

Workspace Admins have unrestricted access to every feature, including Settings. Any Jira Administrator on your site automatically qualifies as a Workspace Admin — no separate assignment is needed.

Workspace Admins can:

• Complete and re-run the onboarding wizard

• Enable or disable E-SignSeal on specific Jira projects

• Assign users and groups to the Template Manager and Sender roles

• View all contracts and templates across the workspace

• Void or cancel any contract

• Configure general and authentication settings

Template Manager

Template Managers build and maintain contract templates. Assign this role to legal, procurement, or operations staff who own your standard agreements.

Template Managers can:

• Create, edit, and delete draft templates

• Insert Jira merge fields into template content

• Publish templates (making them available for Senders to use)

• Create draft copies of published templates to revise content

• View all templates regardless of who created them

Template Managers cannot void contracts or modify app settings.

Sender

Senders initiate contracts. Assign this role to account managers, sales operations, or HR staff who need to send agreements but should not edit master templates.

Senders can:

• Start a new contract from any published template

• Link a contract to a Jira issue

• Add signers from the Jira user directory

• Configure per-contract settings (title, expiry days, reminder schedule)

• Send manual reminders (one per signer per 24-hour window)

• Void contracts they created

• View contracts they sent

Senders cannot access the template editor or modify app settings.

Signer

Signers receive signing invitations and complete the signing session. Any Jira user can be added as a signer on a contract — the Signer role is granted implicitly for the duration of that envelope.

Signers can:

• Access their personal signing session via the invitation link or Jira notification

• Review the contract document

• Verify their identity with a one-time passcode (OTP) sent to their Jira email

• Draw or type their signature

• Decline a contract with a reason

Signers cannot create templates, send contracts, or view other users' signing sessions.

Assigning roles

Roles are assigned in Settings → Permissions. You can assign individual Jira users or entire Jira groups.

1. In E-SignSeal, select Settings in the sidebar.

2. Open the Permissions tab.

3. For each role (Template Manager, Sender), select Add users or groups and search your Jira directory.

4. Select Save.

Changes take effect immediately. Removing a user from a role does not affect contracts or templates they have already created.

Role matrix

Next steps

• Permissions and Roles (Admin reference) — detailed admin configuration

• Project Settings — control which projects can use E-SignSeal