# The Delegated Admin Workflow

- Source: https://support.icompaas.com/support/solutions/articles/a_1786446567369645-the-delegated-admin-workflow
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Trust Center - Safety & Security Posture](https://support.icompaas.com/support/solutions/c_1783434226947291) › [Topics](https://support.icompaas.com/support/solutions/folders/f_1783434267025556)
- Last updated: 2026-08-11
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

THE DELEGATED ADMIN FLOW

  

Adding the delegated admin by the GRC-OPS Admin:

  

-   The GRC-OPS admin will be adding the delegated admin of the tenant trustcenter in the iCompaas trustcenter support portal app.
    

  

  

POST Delegated Admin addition:

  

-   After adding the user as an delegated admin will be notified via email , now that user becomes the admin of that particular trustcenter, and he has the below accesses:
    

  

1.  Can approve the access for the user to view or download the requested document.
    
2.  Can reject the access that is requested by the user.and also revoke the given access.  
      
    

-   In the same pending request section, there is a one more option namely the view history, where the delegated admin can see the grants,revokes and also rejections for the users with date and time range and they can also review it and close.
    

  

  

-   To revoke the access immediately for the given users there is also another section namely granted document access there also we can revoke the access immediately.
    

  

  

-   The Delegated admin can also control their document visibility in the document visibility section, there they can declare the document as a public document or the gated document, and also they can make that document visible or disabled for the trustcenter.

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.