Admin and security

Access to the admin console is available to Super Admins, Admins, and Billing Owners in Asana, each with different access scopes and privileges in the console.

The security features you can enforce for user login include Google SSO, SAML authentication, two-factor authentication (2FA), session duration limits, and password strength requirements.

To manage user provisioning and deprovisioning, use SCIM provisioning and deprovisioning to automate group sync, user creation, and removal. You can also add and deactivate users manually in the admin console.

You can control guest user access by setting guest invite restrictions and managing guest permissions, limiting their ability to see or invite others.

The permission levels available for projects and goals include role-based access with levels for projects (Admin, Editor, Commenter, Viewer) and goals (Editor, Viewer). Workspace roles include Super Admin, Admin, Member, and Guest.

The mobile security controls available in Asana allow admins to enforce biometric authentication, mobile screen capture restrictions, file attachment permissions, and Intune integration for iOS.

The data control and export options available in Asana include domain export, domain deletion, export team/user CSV, and service accounts. The Audit Log API supports SIEM, DLP, eDiscovery, and archiving integrations.

Asana's data centers are located in the US, Europe, Japan, and Australia. Asana meets HIPAA compliance and supports Enterprise Key Management (EKM).

The admin security controls available for file attachments and team privacy allow you to set controls on file attachment types, team privacy settings, and define organization-wide sharing permissions.

You can integrate with SIEM, DLP, and CASB tools in Asana. Asana supports Security Information Event Management (SIEM), Data Loss Prevention (DLP), CASB, eDiscovery, archiving, and Splunk integration.

Admins can customize onboarding experience in Asana. Enterprise Super Admins can deploy custom onboarding workflows and messages during sign-up.