Admin/owner restrict authority to invite

Hey @Aby, These features are actually not provided and would be interesting to have them. I suggest that a moderator pass this conversation into Product ideas or even that you create a new topic to clearly present your suggestion.

@Gleb @Bruno_Figueiredo @Josh

Hey @Aby I moved your topic over to product ideas and edited the title just so it’s more an affirmation and not a question.

These are all paint points of mine so I get this.

I am the Director of IT from my organization so this is an issue very close to my heart. One of my biggest issues with Figma is that an administrator cannot control who is allowed to invite individuals into the system. Especially since the inviter can pass on permissions equal or less to their own, and that means an editor costs money. I understand from Figma that this was done intentionally in order to reduce the barrier to collaboration but from an Enterprise controls perspective, I simply cannot have non-admins being able to invite outsiders into the organization. An invited user starts as a “viewer” (even if they are a guest) and then they could self-upgrade themselves to editor if the admin is unable to reduce them to “viewer restricted” before that happens. Since there are no notifications to admins when someone is invited, an admin would literally have to be staring at the log all day every day, and as an IT team of 2, we simply don’t have time for this. I’d prefer to just restrict ability to invite outsiders to admin only, along with certain other capabilities in the system, such as creating teams.

Adding my vote to this. As the IT guy at my small company, I am surprised every quarter by new additions to my Figma Organization. I understand the desire for flexible collaboration in Figma, but from an organizational and cost-oversight standpoint, Figma could use some improvement. Some options that would help with this:

• Aby’s recommendations
• In lieu of a revamped invitation process that restricts invitations only to owners/admins, send a confirmation message with a CTA to the owner/admin any time an Editor sends an invitation (this should be pretty standard for any onboarding/procurement)
• Throw a notice to Editors adding new users that their Organization will be billed for any new Editors (should also be part of any checked onboarding/procurement flow)

Why doesn’t disabling public link sharing in the admin settings disable the ability to invite guests outside of the organization, as well? As a user, it is surprising that if public link sharing was disabled, I can still go ahead and invite guests.

Hi Figma friends, I’m a big fan of Figma and one of community advocates. Our company is using Figma Organization but there’re some issues confused me. Just throw it below and hope we can discuss it.

Figma is great, the only thing that makes me feel bad is permission control for admin. Although collaboration is the gene of Figma and we should reduce resistance for collaboration anywhere, but those issues of permission control have been making me frustrated as members scaling.

The issues include:

• Unintended new editors emerge every day.
  We have limited budget so we have to control number of editors and some editors’ permissions are not necessary (Like developers)
• Unintended guests emerge every day.
  Every one can invite guest into an organization, even the guest. More and more guests get into our organization, which will cause some safety problems.
• They created empty teams.
  Everyone can create a team. Some people created some teams and then abandoned those teams, which makes it hard to find a specific team for members.

As an admin of our organization I have to remove their permissions or remind them one by one. This work wasted too many time for me. So I’m here, request some features for finer-grained permission control for organization admin.

Below is my concept design for this feature:

Also, can we have the feature to disable a viewer self-upgrade themselves as an editor? Or approval action needed?

This is a concept from my experience but more considerations and details need to be included, but I hope Figma can put it in a high priority.

Thanks.

I feel there needs to be two levels of admin. Everything you mentioned here and add a second level of an admin who is not at the organizational level; however they can add projects and Users. Then an editor does not have the permission to add users or create a project.

Editors appearing is really concerning. I have to manually check this most days to ensure we wont get charged

Yeah, this can also solve this.

😭 yeah, so painful.