Changes to user roles when upgrading to Enterprise
If your existing workspace upgrades from any other plan to the Enterprise plan:
- All current admins are automatically upgraded to workspace owners
- On Enterprise, the existing workspace admin role has more limited permissions than workspace owner.
- Regular members and guest users remain unchanged
Workspace owners can now assign users to the new admin role as needed.
Migrating from admins to owners with SCIM
If your workspace has SCIM enabled and is currently managing permissions via linear-admins:
- The group will now control workspace owners, not admins
- All users in
linear-adminswill become owners - The group name itself will not change automatically
If you want to start managing admins as well, you can do one of the following:
If you previously renamed your admins management group after first pushing linear-admins, keep using your current renamed group. In the steps below, we refer to linear-admins and linear-owners as the default group identifiers to make the migration easier to follow, but your existing renamed group will continue to work as the admins group it was originally linked to.
Option 1: Rename the admins group
Only use this option if your Identity Provider supports syncing group name changes, e.g., via Okta’s “Rename app groups to match group name in Okta” setting.
If your IdP does not support this—or you’d prefer not to enable this setting—skip ahead to the second option.
- Rename the
linear-adminsgroup tolinear-ownersin your IdP - Create a new
linear-adminsgroup and push it to Linear - Move users who should be admins from
linear-ownersinto the newlinear-adminsgroup
Option 2: Re-link the admins group
Use this option if your IdP does not support syncing group name updates
- Create a new group called
linear-owners - In the Linear security settings, unlink the existing
linear-adminsgroup - Move intended owners from the old
linear-adminsgroup into the newlinear-ownersgroup - Push both
linear-adminsandlinear-ownersgroups to Linear