> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://support.contracthero.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Owner rights: what admins can control in ContractHero

# Owner rights: what admins can control in ContractHero

*The screenshots and menu paths in this article follow the German interface. The English label is given first, with the German label in square brackets.*

"Who is actually our admin?" — ContractHero does not have that role. The role with the widest reach is called **Owner [Eigentümer]**. This article covers what an owner can control, where each thing lives, and what even owners cannot do.

## Your benefit

When it is clear who is allowed to do what, permission questions stop landing in support and stop being decided by accident. Owners know which levers they hold themselves — and which topics are worth routing through the Customer Experience team.

## Admin or owner?

ContractHero has two kinds of access:

* **Owner [Eigentümer]** — sees and edits **every** contract in the organisation, regardless of any roles, and administers the organisation itself. This is what most people mean by "admin".
* **Member with a role [Mitglied mit Rolle]** — sees only what the assigned role allows. Several roles per person are possible; the access adds up.

You can see who is an owner under **Settings → Organization → Members [Einstellungen → Organisation → Mitglieder]**, in the **Organization owner [Organisation Eigentümer]** column.

> **Recommendation: at least two owners per account.** Otherwise the organisation has nobody able to administer it during holidays, illness or after someone leaves.

## What only owners can do

### Manage people and access

Under **Settings → Organization → Members**, described as "manage team members, their roles and access rights", you invite people via **+ Add new member [+ Neues Mitglied hinzufügen]**. The table controls the following per person:

| Column | What it controls |
| --- | --- |
| **Organization owner** | Full access to everything, including administration |
| **Role** | Which contracts the person may see and edit |
| **Field builder [Feldbaukasten]** | May create and change fields and categories |
| **Task automation [Aufgabenautomatisierung]** | May create and change automations |
| **Contract templates [Vertragsvorlagen]** | May create and manage templates |

### Create and change roles

Under **Settings → Organization → Roles [Einstellungen → Organisation → Rollen]** you find the **Member roles [Mitgliederrollen]** card — "set and manage roles to control organisation access". **+ Add new role [+ Neue Rolle hinzufügen]** creates one; the overview lists each role's **rules** with their level (read access or full access) and conditions.

### Trace who was given what, and when

**Settings → Organization → Change log [Einstellungen → Organisation → Änderungsprotokoll]** holds the **permission change log** — "for tracing user access and security updates". It records **When / Who / Action**: who was invited, who accepted, what was revoked, which roles were created. Useful for audits.

Not to be confused with the [change log on a contract](https://support.contracthero.com/en-us/article/what-information-is-available-in-the-change-log-1mdj620/), which documents content changes.

### Release teams and categories

Under **Settings → Teams** you see all teams in your organisation, and below them the matrix "your teams have access to categories". Tick boxes to release individual contract categories per team. **+ Create new team [+ Neues Team erstellen]** adds another.

### Define the data model

**Settings → Field builder [Einstellungen → Feldbaukasten]** splits into **Contract field builder** and **Contact field builder**. This is where categories, fields and the AI prompts that extract contract data are defined.

### Administer the organisation itself

**Settings → Organization → Organization details [Details zur Organisation]** gathers the account-level topics:

* **Rename organization**
* **Organization limits** — current plan limits and their usage: team members, teams and contracts
* **Signature credits** — used and available FES and QES signatures, plus the date the credit renews
* **Invite ContractHero Support** — gives our support team access to your organisation when we need to look at a problem directly with you
* **Trash retention [Aufbewahrung im Papierkorb]** — how long deleted contracts stay in the trash before they are removed for good (platform default: 30 days)
* **Number format** — whether number fields always show all configured decimal places
* **Delete organization** — final, including all contracts and settings

### Restore what was deleted

**Settings → Trash [Einstellungen → Papierkorb]** shows deleted contracts within the configured retention period. See [Trash Bin: How do I restore a deleted contract?](https://support.contracthero.com/en-us/article/how-do-i-restore-a-deleted-contract-1fhr2ax/)

## Additional areas, depending on your plan

You only see these if your plan includes them — if the menu entry is missing, the feature is not active for your account:

* **Integrations** (webhooks) — from the Professional plan
* **Custom single sign-on** and **Access Delegation** — Enterprise
* **Advanced Permission Concept (APC)** — included in the Enterprise plan, otherwise bookable as a module
* **Automatic backups** — Enterprise

## What even owners cannot do

* **Hide individual fields.** Anyone who may see a contract sees every field in it. Sensitive content belongs in its own category.
* **Restrict access to a single contract.** Rules apply to contract attributes, never to a contract ID.
* **Filter by contract value.** Number fields are not available as a condition.
* **Forbid "everything except X".** ContractHero works exclusively with inclusion logic.
* **Switch between Standard and APC themselves.** That runs through the Customer Experience team.

## Frequently asked questions

**Is there an admin role in ContractHero?**
No. What is called "admin" elsewhere is the **owner** of the organisation here. Alongside that there are members with roles, plus individual additional rights per person (field builder, task automation, contract templates).

**How do I make someone an owner?**
Under **Settings → Organization → Members**, tick the **Organization owner** column for that person. Do it deliberately — owners see every contract without exception.

**Does an owner really see every contract?**
Yes. Roles do not restrict owners. That is also why assigning a role to an owner achieves nothing.

**Who can change fields and categories without being an owner?**
Anyone with **Field builder** enabled in the members table. There are separate rights for **Task automation** and **Contract templates**.

**Can I give support access to our organisation?**
Yes, via **Organization details → Invite ContractHero Support**. That is the clean route when we need to look at a problem directly in your account — you stay in control and can remove the access again.

**How long do deleted contracts stay restorable?**
30 days by default. You change the period under **Organization details → Trash retention**.

**Why is the "Integrations" menu entry missing for us?**
Because webhooks are only included from the Professional plan. The same applies to SSO and automatic backups, which belong to the Enterprise plan. Your Customer Success Manager can tell you which modules are possible for your account.

## Good to know

* **At least two owners.** A single owner is a single point of failure — during holidays or after someone leaves, nobody else can assign roles.
* **Owner status is not a halfway step.** Someone who only needs to maintain fields needs the field builder right, not owner status.
* **The permission change log is your audit evidence.** It answers "who gave whom access, and when" without asking us.
* **Deleting an organisation is final.** There is no trash and no restore afterwards.

## Related articles

* [Permission concepts compared: Standard, APC and Dynamic](https://support.contracthero.com/en-us/article/permission-concepts-compared-standard-apc-and-dynamic-23d720/)
* [How can I create new roles?](https://support.contracthero.com/en-us/article/how-can-i-create-new-roles-14s3bj/)
* [Invite people: How to manage roles and permissions for additional users](https://support.contracthero.com/en-us/article/invite-people-how-to-manage-roles-and-permissions-for-additional-users-1o7xinp/)
* [What is the Advanced Permission Concept (APC)?](https://support.contracthero.com/en-us/article/what-is-the-advanced-permission-concept-apc-1b1haeg/)
* [Write access: let your team edit without letting them delete](https://support.contracthero.com/en-us/article/write-access-let-your-team-edit-without-letting-them-delete-k3ykn6/)
* [Trash Bin: How do I restore a deleted contract?](https://support.contracthero.com/en-us/article/how-do-i-restore-a-deleted-contract-1fhr2ax/)