Plan requirement
| Subscription | Suite Enterprise or higher, Support Enterprise |
| Access | Admin |
Limiting who may export everything. A small setting covering one of the larger risks in an account.
Set it
- Open the security settings in Admin Center.
- Restrict data export to named admins.
- Choose who keeps the permission.
- Tell the admins who lost it, and how to request an export.
Why this is worth doing
Every other permission governs what somebody can change. This one governs whether they can take a complete copy of your customer data out of the platform in a few clicks.
It is also the permission most admins never use, which makes it cheap to restrict.
Two people, not one
One is a single point of failure when they are away. Two is enough for continuity and small enough to be meaningful.
Tell people the route
Somebody who needs an export and cannot run one will find another way, usually a worse one: an Explore export, or a colleague running it for them. Say who to ask, so the restriction shapes behaviour rather than being worked around.
Most requests are not really for an export
They are for a number, or a list. A report or a scheduled dashboard answers those better and leaves no file behind, so ask what the export is for before running one.
Review after any change
People change roles and leave. This permission should be checked whenever your admin list changes, which is exactly when it is easy to forget.
Comments
0 comments
Article is closed for comments.