How to create an Integrations Admin in Span

Last updated: October 27, 2026

An Integrations Admin is someone in your organization who can connect and manage your tool integrations (GitHub, GitLab, Jira, Linear, HR systems, and more) without broader admin access. Span includes a built-in Integration Admins permission group for this.

Why it matters

  • For admins: the engineer or IT admin who owns your GitHub org or Jira site can set up the connection themselves, without seeing people data or changing other settings.

How it works

Everything an Integrations Admin can do comes from one global permission, Manage Integrations ("Add, edit, and remove integrations."). It opens these Settings pages:

  • Integrations: add, configure, reconnect, and remove integrations, including API keys and tokens.

  • Traces: the organization token for the endpoint agent and trace collection settings.

  • Single Sign-On and SCIM Setup: start or continue identity provider setup.

The built-in Integration Admins group grants Manage Integrations and nothing else. Owners and Admins also have it.

Setup

Step 1: Make sure the person can sign in to Span

The person needs a Span account in your organization. If they don't have one yet:

  1. Go to Settings → People Management.

  2. Click Add member → Add manually, or find their row if they're already listed and click Edit.

  3. Set Access Type to Account. For a new person, the button reads Send Invite.

If your organization uses SCIM, assign them to the Span app in your identity provider instead. Their Span person must already exist. Your Span account representative can tell you which method your organization uses.

Step 2: Add them to Integration Admins

You need the Manage Permission Groups permission (Owners).

  1. In Settings → People Management, click the person's Permission groups cell, or click Edit on their row.

  2. Add Integration Admins and save.

Alternative: create your own group

If you want integration rights combined with other access, create a custom group:

  1. Go to Settings → Permission Groups and click Add group.

  2. On the setup step, name the group and choose members: Individuals to pick people by name, or People that meet specific criteria to match on fields such as job title.

  3. In Global Permissions, select Manage Integrations.

  4. Set any data access you want in the Teams, People, and Self steps.

  5. Review and click Finish.

Things to know

  • What they can't do (unless they're also in another group that allows it): manage permission groups, see salary or cost data, manage members, or change metric and other organization settings.

  • SSO and SCIM setup are included. Because the Single Sign-On and SCIM Setup pages use Manage Integrations, an Integrations Admin can start identity provider setup. Span still turns on SCIM provisioning, and Span holds your organization's email domain list.

  • Some steps need Span. After you connect an HR system, Span sets it up as your roster source. Span support also sets any GitLab group or project allowlists.

Related articles

Need help?

Contact your Span account team or reach out to support@span.app.