• Owner rights: what admins can control in ContractHero

  Owner rights: what admins can control in ContractHero The screenshots and menu paths in this article follow the German interface. The English label is given first, with the German label in square brackets. "Who is actually our admin?" — ContractHero does not have that role. The role with the widest reach is called Owner [Eigentümer]. This article covers what an owner can control, where each thing lives, and what even owners cannot do. Your benefit When it is clear who is allowed tFew readers

• How are notifications configured and managed?

  How to configure which ContractHero events notify you, and whether each one arrives by email, in the web application, or both.Some readers

• How can I create new roles?

  How to create a role in ContractHero, set full access, read-only or no access per contract category, and assign the role to a team member.Some readers

• How do I create a new team and release categories to it?

  Create a team and decide per team which contract categories it can see — via the team/category matrix in the settings.Some readers

• Invite people: How to manage roles and permissions for additional users

  Invite members, assign roles and owner status, unlock special features and remove access again.Few readers

• Microsoft Entra SSO fails: Client secret expired — how to fix it

  Microsoft Entra SSO fails: Client secret expired — how to fix it Summary: If users can’t sign in via “Sign in with Microsoft” (SSO), the client secret of your Microsoft Entra app registration likely expired. Create a new client secret in Entra and update your ContractHero SSO configuration. With IT support this takes ~15–20 minutes. Immediate workaround: Users can continue to sign in at app.contracthero.com/login with email + password (“**Forgot passwSome readers

• Permission concepts compared: Standard, APC and Dynamic

  ContractHero runs on one of two permission models — Standard or APC. This is what separates them, where Dynamic fits in, and which one suits your organisation.Few readers

• Advanced Permission Concept (APC): configuring roles with rules

  The screenshots in this article show the German interface. The English label is given first, with the German label in square brackets. What's in it for you A single APC role often replaces several near-identical standard roles. What the standard concept needs 15 roles for (3 countries × 5 functions), APC frequently handles in one. The available condition types let you filter on contract fields such as status, counterparty or term type — which cuts maintenance and makes the permission modeFew readers