# System roles, workflow managers and delegated access

*Slack Administrator Study Guide · Fundamentals · Last updated October 21, 2026 · https://www.certifyforce.com/study-guide/slack-administrator/fundamentals/system-roles-workflow-managers-and-delegated-access*

Give each person the narrowest access that does the job: a workflow manager or Channel Manager for one object, a system role (scoped to a workspace on Enterprise) for one admin task, a custom role on Enterprise, and Workspace Admin only for running a workspace. Covers which system roles each plan allows, who assigns them and the Frontline Member account type.

- Certification: Salesforce Slack Administrator
- Exam section: Fundamentals
- Study guide: https://www.certifyforce.com/study-guide/slack-administrator

**Official exam objective:**

> Identify the correct level of access to give a person based on a given scenario.

## What the exam expects

- Apply least privilege: pick a workflow manager, Channel Manager, system role or custom role before Workspace Admin, Org Admin or Owner.
- Match an administrative task to the system role that grants it, and know which roles each plan lets you assign.
- Say who assigns system roles and custom roles, and why a Roles Admin can't create another Roles Admin.
- Scope a role or Workspace Admin to one workspace of an Enterprise org, choose Frontline Member for employees who need only essential features, and widen who can invite guests without making anyone an admin.

Key terms:
- **System role:** a Slack-built administrative role for one task, such as Users Admin or Export Admin.
- **Custom role:** an administrative role built from chosen permissions, on Enterprise plans.
- **Roles Admin:** the system role that manages who holds system roles.
- **Workflow manager:** a person added to one workflow to edit and maintain it.
- **Frontline Member:** a lower-cost employee account type with essential features, from the Frontline add-on.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Users Admin | Add, remove or deactivate non-admin users | [Types of roles](https://slack.com/help/articles/360018112273-Types-of-roles-in-Slack) |
| Integrations Admin | View, install, approve and restrict apps | [Types of roles](https://slack.com/help/articles/360018112273-Types-of-roles-in-Slack) |
| Business+ system roles | Assignment article: Message Activity Manager, Sales Admin, Skills Manager, Workflow Admin (roles page also marks Salesforce Admin) | [Assign system roles](https://slack.com/help/articles/1500004132581-Assign-members-to-system-roles) |
| Enterprise scoping | Assign for the entire org or specific workspaces | [Assign system roles](https://slack.com/help/articles/1500004132581-Assign-members-to-system-roles) |
| Roles Admin limit | Cannot assign others to Roles Admin | [Assign system roles](https://slack.com/help/articles/1500004132581-Assign-members-to-system-roles) |
| Org Owners | No system roles access by default | [Types of roles](https://slack.com/help/articles/360018112273-Types-of-roles-in-Slack) |
| Custom roles | Enterprise; Org Primary Owner and org-level Roles Admins | [Create custom roles](https://slack.com/help/articles/29800891169939-Create-custom-roles) |
| Channel Managers | Up to 100 per channel; assigned by owners, admins or Channel Managers in the channel | [Channel Managers](https://slack.com/help/articles/8328303095443-Understand-Channel-Managers-in-Slack) |
| Demote a Workspace Admin | Workspace Owners and Workspace Primary Owner only | [Change a member's role](https://slack.com/help/articles/218124397-Change-a-members-role) |
| Frontline Members | One workspace, up to 10 channels, Enterprise+ add-on | [Frontline Members](https://slack.com/help/articles/56350332978323-Understand-Frontline-Members-in-Slack) |

## Check yourself

- Why is a system role better than Workspace Admin for a single admin task?
- When does an Enterprise org need a custom role instead of a system role?
- Who can add another Channel Manager to a channel?
- Which roles can a Business+ Workspace Owner assign?

## Sources

- [Types of roles in Slack](https://slack.com/help/articles/360018112273-Types-of-roles-in-Slack)
- [Assign members to system roles](https://slack.com/help/articles/1500004132581-Assign-members-to-system-roles)
- [Permissions by role in Slack](https://slack.com/help/articles/201314026-Permissions-by-role-in-Slack)
- [Create custom roles](https://slack.com/help/articles/29800891169939-Create-custom-roles)
- [Guide to Slack Workflow Builder](https://slack.com/help/articles/360035692513-Guide-to-Slack-Workflow-Builder)
- [Understand Channel Managers in Slack](https://slack.com/help/articles/8328303095443-Understand-Channel-Managers-in-Slack)
- [Change a member's role](https://slack.com/help/articles/218124397-Change-a-members-role)
- [Understand Frontline Members in Slack](https://slack.com/help/articles/56350332978323-Understand-Frontline-Members-in-Slack)
- [Manage who can invite guests in an Enterprise organization](https://slack.com/help/articles/115003717963-Manage-who-can-invite-guests-in-an-Enterprise-organization)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 13 linked practice questions, and unlimited timed mock exams are included with the Slack Administrator pack (USD $19): https://www.certifyforce.com/practice-exams