# Manage Governance Groups & Applications without ORG\_ADMIN user level **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** identity-security-cloud\ **Created:** [April 7, 2026, 7:14pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913 "2026-04-07T19:14:26Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ssowmya567](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ssowmya567/32/30945_2.png) [@ssowmya567](https://developer.sailpoint.com/discuss/u/ssowmya567)\ **Post date:** [April 7, 2026, 7:14pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/1 "2026-04-07T19:14:26Z")
We are trying to delegate access to manage governance groups and applications in ISC. However, it appears that manage access to these objects is only available with the ORG\_ADMIN user level. We also explored custom user levels but were unable to grant the required permissions. Is there any recommended approach or workaround to delegate this access without assigning ORG\_ADMIN user level? ---
**Author:** ![trettkowski](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/trettkowski/32/36103_2.png) [@trettkowski](https://developer.sailpoint.com/discuss/u/trettkowski)\ **Post date:** [April 7, 2026, 7:47pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/2 "2026-04-07T19:47:59Z")
HI @ssowmya567 I haven’t done this exact use case, but something very similar with role management. I’d recommend a form/workflow approach that you can assign to users as a launcher. You can basically make a form with very narrow inputs and use a secondary form as an “approval” before the action actually takes place. For example, letting users select an existing governance group and add additional members to it or even a form to create brand new governance groups. The possibilities are endless assuming you want to actually do the work of building the form/workflow. If you require that the users need to see the governance group and applications in the UI specifically, I’m not aware of any workaround. ---
**Author:** ![agoyal27](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/agoyal27/32/41747_2.png) [@agoyal27](https://developer.sailpoint.com/discuss/u/agoyal27)\ **Post date:** [April 7, 2026, 7:57pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/3 "2026-04-07T19:57:43Z")
Hi @ssowmya567 , Have you tried ISC cloud governance connector for this requirement? ---
**Author:** ![ssowmya567](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ssowmya567/32/30945_2.png) [@ssowmya567](https://developer.sailpoint.com/discuss/u/ssowmya567)\ **Post date:** [April 7, 2026, 8:04pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/4 "2026-04-07T20:04:28Z")
Hi @trettkowski, Thanks for the suggestion! In our case, the requirement is not for end users via forms/workflows. We are trying to provide access to a limited set of internal users (like application onboarding or IAM team members) to directly manage governance groups and applications. We are looking for a way to achieve this via user levels rather than building workflows. Please let me know if you’ve come across anything similar in terms of delegated admin access. ---
**Author:** ![ssowmya567](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ssowmya567/32/30945_2.png) [@ssowmya567](https://developer.sailpoint.com/discuss/u/ssowmya567)\ **Post date:** [April 7, 2026, 8:05pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/5 "2026-04-07T20:05:25Z")
Hi @agoyal27, Thanks for your response! I haven’t explored the ISC Cloud Governance Connector for this use case yet. Could you please share a bit more detail on how it can help in managing governance groups and applications without Admin access? That would be really helpful. ---
**Author:** ![trettkowski](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/trettkowski/32/36103_2.png) [@trettkowski](https://developer.sailpoint.com/discuss/u/trettkowski)\ **Post date:** [April 7, 2026, 8:10pm UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/6 "2026-04-07T20:10:19Z")
Unfortunately, I don’t think anything at that granular level exists in ISC yet. If you look at the ISC User Level matrix, applications and governance groups are strictly an Admin only capability: > **[User Level Access Matrix - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/common/users/user_level_matrix.html)** > > SailPoint Identity Services Documentation The custom user levels only cover these as far as I know and by just looking over them, none of them seem to fit your use case: idn:ui-identity-management-read idn:ui-identity-management-write idn:ui-identity-access-history-page-read idn:ui-access-profiles-read idg:ui-admin idn:ui-access-intelligence-center-page-write idn:ui-password-sync-group-read idn:ui-access-entitlements-write idn:ui-virtual-appliance-clusters-read idn:ui-access-roles-read idg:ui-read-only idn:ui-virtual-appliance-clusters-write idn:ui-password-sync-group-write idn:ui-access-entitlements-read idn:ui-identity-accounts-read idn:ui-access-profiles-write idn:ui-access-roles-write idn:ui-password-policy-write idn:ui-access-intelligence-center-page-read idn:ui-identity-accounts-write idn:ui-password-policy-read I think your only option are forms/workflows if you want them to be able to perform those tasks without having other ORG\_ADMIN capabilities. ---
**Author:** ![agoyal27](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/agoyal27/32/41747_2.png) [@agoyal27](https://developer.sailpoint.com/discuss/u/agoyal27)\ **Post date:** [April 8, 2026, 3:16am UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/7 "2026-04-08T03:16:22Z")
Hi @ssowmya567 , You will be able to see governance groups as entitlements. for more details, you can check > **[Integrating with SailPoint Identity Security Cloud Governance](https://documentation.sailpoint.com/connectors/saas/identity_security_cloud_gov/help/saas_connectivity/identity_security_cloud_governance/intro.html)** > > SailPoint Connectors Documentation Hope this helps. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [June 7, 2026, 3:17am UTC](https://developer.sailpoint.com/discuss/t/manage-governance-groups-applications-without-org-admin-user-level/201913/8 "2026-06-07T03:17:14Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.