Permissions and Roles

The Permissions tab in E-SignSeal Settings is where Workspace Admins assign the Template Manager and Sender roles to Jira users and groups. This page is the admin reference for role management — for a conceptual overview of what each role can do, see Roles and Permissions.

Settings Permissions tab showing Template Manager and Sender role panels with assigned users

Accessing Permissions Settings

1. In E-SignSeal, select Settings in the sidebar.

2. Select the Permissions tab.

Only Workspace Admins can view and modify Permissions Settings.

Role panels

The Permissions tab shows two panels: Template Manager and Sender. Each panel lists the current assignees (users and groups) and provides controls to add or remove them.

The Workspace Admin role is not managed here — it is granted automatically to any Jira Administrator on the site.

Adding users or groups to a role

1. In the relevant role panel, select Add users or groups.

2. A search dropdown appears. Type the name of a Jira user or a Jira group.

3. Select the user or group from the results.

4. The assignee appears in the panel immediately.

Changes take effect immediately. No save button is required.

Using Jira groups

Assigning a Jira group to a role is the recommended approach for teams of more than 5 people. When you add a user to the Jira group, they automatically gain the E-SignSeal role — no additional configuration is needed. Similarly, removing them from the group removes their E-SignSeal access.

Recommended group naming conventions:

• esign-template-managers — for the Template Manager role

• esign-senders — for the Sender role

Create these groups in Jira Settings → User management → Groups before assigning them here.

Removing assignees

To remove a user or group from a role:

1. Find the assignee row in the role panel.

2. Select the × icon next to their name.

3. Confirm in the confirmation prompt.

Removing a user from a role does not affect contracts or templates they have already created. In-progress contracts they sent continue to completion. Their historical activity remains in the audit trails.

Auth tab (read-only)

The Auth tab in Settings shows the current OTP authentication configuration. This configuration is set by E-SignSeal and cannot be changed by admins:

These values are shown for transparency and compliance documentation purposes. If your security requirements demand different authentication parameters, contact Optimizory support.

Effective permissions by role

See the role matrix in Roles and Permissions for a complete table of what each role can and cannot do.

Next steps

• Roles and Permissions (user guide) — role capabilities explained for end users

• Project Settings — control which Jira projects are enabled

• General Settings — workspace-level defaults