ContractHero Knowledge base
  • German
  • English (US)
Go to website
Back
Articles on:User Management & Permissions
Roles & Permissions, Subteams

Categories

  • Data Management & Automation
  • Contract Management - Basics
  • Category Administrator
  • User Management & Permissions
  • Other Functions
  • Integrations, SSO & API
  • Account, billing & security
  • AI & contract analysis
  • Overview & productivity
  • Users, roles & permissions
  • Electronic signature
  • Managing & organizing contracts
  • Creating & importing contracts
  • Contacts & counterparties
  • Field builder
  • How can I create new roles?
    How to create a role in ContractHero, set full access, read-only or no access per contract category, and assign the role to a team member.Popular
  • How is partner management handled in the system?
    How to manage contract partners as contacts in ContractHero: create and edit contacts, merge duplicates, save your own views and export them.Popular
  • How are notifications configured and managed?
    How to configure which ContractHero events notify you, and whether each one arrives by email, in the web application, or both.Popular
  • What is the purpose of sub-teams, and how are they managed?
    How teams control which contract categories a department can see, and how to create and adjust that access in ContractHero.Some readers
  • Microsoft Entra SSO fails: Client secret expired — how to fix it
    Microsoft Entra SSO fails: Client secret expired — how to fix it Summary: If users can’t sign in via “Sign in with Microsoft” (SSO), the client secret of your Microsoft Entra app registration likely expired. Create a new client secret in Entra and update your ContractHero SSO configuration. With IT support this takes ~15–20 minutes. Immediate workaround: Users can continue to sign in at app.contracthero.com/login with email + password (“**Forgot passwSome readers
  • What is the Advanced Permission Concept (APC)?
    Why APC? The Advanced Permission Concept (APC) enables organizations to control access to contracts with maximum precision. By combining rules such as category, location, and function, APC ensures the right people have the right level of access – no more, no less. Key Benefits One system for all entities and countries – Avoid duplicate uploads, central departments (Procurement, HR) can work group-wide. Maximum security & compliance – Granular rights down to contract level reduce rSome readers
  • Invite users and manage permissions
    Invite users and manage permissions Why this matters Contracts are rarely a solo job. Finance checks amounts, Legal reviews clauses, Procurement runs vendors. Who sees which contracts decides how fast your team moves — and how safely sensitive content stays protected. With ContractHero's user management you invite new members in seconds, assign exactly the right role, change permissions any time, and cleanly remove access when someone leaves — no IT ticket, every change traceable in theFew readers
  • Permission concepts compared: Standard, APC and Dynamic
    ContractHero runs on one of two permission models — Standard or APC. This is what separates them, where Dynamic fits in, and which one suits your organisation.Few readers
  • Invite people: How to manage roles and permissions for additional users
    Invite members, assign roles and owner status, unlock special features and remove access again.Few readers

Not finding what you are looking for?

Chat with us or send us an email.

  • Chat with us
© 2026ContractHero Knowledge base