Access to this feature can change based on your Quickbase plan. Learn more about feature availability and plans in Quickbase capabilities.
Realm admins can promote full-management account admins and realm admins to super users. Super users have access to all apps in the realm and other added flexibility. Super users can do things like:
-
Make changes to any app in the absence of key employees
-
Look across all apps to verify that certain types of data are not being stored
-
Simplify the process of setting up solutions
Super user permissions
Super users can:
- Access any app in the realm with app manager-level permissions
- Learn how to restrict super users access to an app
- Create an API call without an app token
- Bypass IP filtering
In multi-account realms, super user permissions are granted at the account level. This means that super users do not automatically have access to all apps in the realm. Instead, they are only granted super user permissions for accounts where they are also an account admin.
Changing or removing permissions of super users
The following table outlines some possible permission changes and what the impact will be on super user permissions.
| Permission change/removal | Result |
| Super user is denied from the realm | Super user loses all access to apps |
| Super user who was previously denied is undenied | User is automatically reinstated as super users |
| Realm/account admin who is also a super user is demoted to a regular user | User is no longer a super user |
| Regular user who was previously a realm/account admin and a super user is reinstated as a realm/account admin | User is not automatically a super user |
Designating a super user
Realm admins can designate up to ten super users. Only realm admins or account admins with full management privileges can be designated as super users.
To designate a super user:
- Navigate to the Super Users page in the Admin Console
- Click the check mark next to the admin(s) you want to appoint as super users
- To revoke super user permissions, clear the check mark in the Super User column
Designating a super user is an important and sensitive task because super users have very wide-ranging access to your apps and data. Give new super users guidance on appropriate app access for your organization.
If super users are removed as admins, they will also be removed as super users. If a super user is both an account admin and a realm admin and only one of the admin permissions is removed, their super user permissions will not be removed.
Super user visibility
Realm admins see and manage super users on the Super User page in the Admin Console.
Full-management account admins see and manage super users in the grid on the Permissions page of the Admin Console. Full-management account admins cannot designate super users, but they can demote super users using the grid.
Restricting super user access to an app
Set apps as private to keep super users from accessing them. You may want to set apps as private that contain sensitive data and need to be restricted for legal, compliance, or regulatory reasons.
Super users will not have access to private apps. However, app managers may still add super users to private apps to grant them access.
Setting an app as private
- Navigate to the Super Users page in the Admin Console.
- Click Add in the Set apps as private table.
- Enter the app ID. If you want to mark several apps as private, separate the app IDs with a comma. You can enter up to 10 app IDs at once.
- To remove apps from the private list, select the checkbox next to the app name and click Remove.
Limitations on super user access
- When using advanced search or viewing app pickers, super users see only the apps that they have been added to by app admins.
- Super users who make an API call using a user token for authentication can't access apps not assigned to the user token. Super users are still subject to the restrictions on user token usage.
- Super users do not receive email notifications targeted to app admins and managers.
- Super users cannot access apps that have been set as private
-
Super users cannot use Sync unless they have explicit access to the app (i.e., the super user has another permission in the app).