Data room user roles: who should be an admin, contributor or viewer

Picture the call. It is week six of a sale, a bidder has dropped out, and the deal partner asks who can cut them off right now. The answer turns out to be one associate, who is on a flight to Singapore.

That is a role problem, not a software problem. Every serious data room lets you assign roles, and most deal teams spend about four minutes thinking about them on setup day. This guide is the longer version of that conversation.

A data room user role is a preset bundle of actions a user is allowed to take inside the room: viewing, uploading, answering questions, inviting people, changing settings. It sits on top of folder permissions, which decide where those actions apply.

What roles does a typical data room offer?

Names vary by provider, and some platforms let you build custom roles from individual rights. Underneath the labels, though, almost every room maps to the same seven building blocks.

A few notes on the less obvious rows.

Owner is often a single account tied to the contract. On self-serve platforms it is whoever entered the card details. Treat it as a break-glass account, not a daily login.

Q&A expert and approver only exist in rooms with a structured Q&A module. The expert drafts an answer in their category (tax, HR, IP); the approver, usually deal counsel or the lead adviser, decides whether it goes out and to whom.

Bidder lead is the role people forget. On most platforms you can let one named person at each bidder invite and remove their own colleagues, inside their own group, without touching anyone else. It saves the seller’s admin dozens of invitation requests in the first week.

Viewer is the default for everyone outside the seller’s team. What a viewer can do with a document (view only, print, download, download original) is set on the group, not the role, which brings us to the distinction that causes most mistakes.

How is a role different from a permission group?

A role answers “what can this person do?” A permission group answers “which documents can they do it to?”

You will usually set both. A tax adviser on the seller side might be a Q&A expert (role) who can see only folders 4 and 9 (group). A bidder’s lawyer is a viewer (role) in the Bidder C group, which can see folders 1 to 8 in view-only mode with watermarks.

The common error is solving a visibility problem with a role. Someone needs to see the HR folder, so they get promoted to administrator, because administrators can see everything. Six weeks later that person has the power to change every bidder’s access, and nobody remembers why. If the need is visibility, fix the group. Promote the role only when the person needs a new action.

Who should hold each role on a sell-side process?

Here is a typical split for a mid-market sale with four bidders. The seat counts are illustrative, but the shape holds for most competitive processes.

Notice what is missing. No bidder is an administrator. No contributor approves Q&A. The person who uploads files is not the person who decides who sees them, with one deliberate exception: deal counsel often holds both administrator and approver rights, because disclosure decisions are legal decisions.

Why does segregation of duties matter in a data room?

Segregation of duties is an old audit idea: no single person should be able to start, approve and conceal an action. Security standards build it into their access control requirements; ISO/IEC 27001 lists it among its controls, and the US NIST glossary defines it in almost exactly those terms.

In a data room, it protects you against three realistic failures.

1. The wrong file reaches the wrong bidder. If one person uploads a customer contract and also sets the group permissions, nobody else looks at it before it goes live. With two people, the second one previews the room as each bidder group and catches it.
2. An answer discloses too much. A finance contributor answering a question directly can confirm a number the seller wanted to hold back until round two. Routing through an approver prevents that.
3. Nobody can prove what happened. If one admin account is shared by three people, the audit trail shows the account, not the person. When a buyer later claims a document was never disclosed, you want the log to name a human.

Shared logins defeat the audit trail. If three people use one administrator account, you have one witness instead of three.

How many administrators should a data room have?

Two is the floor. One primary, one backup, ideally in different time zones or at least different calendars. A room with a single administrator is a room that cannot react when that person is unreachable.

Three is comfortable for most sales: the adviser’s deal lead, deal counsel and one person on the seller’s finance team.

Above four, the risk curve turns. Every administrator can add a user, widen a group or switch off a watermark, and every extra one is another account that can be phished. If the fifth person only needs to upload, make them a contributor. If they only need to see everything, give them a seller-side viewer group with access to all folders.

Pair the role choice with the security settings that make it hold: mandatory two-factor login for every administrator, single sign-on where your platform supports it, and session timeouts. Our security features guide covers those in depth.

How should roles change as the deal moves?

Roles are not set once. Each phase of a process changes who needs what, and the most common leak path is a role nobody revisited.

• Preparation. Only seller-side roles exist. Contributors are busiest; administrators are building groups.
• First round. Bidder groups open with viewer rights to a limited set of folders. Q&A experts start receiving questions.
• Second round. Fewer bidders, wider folder access, heavier Q&A. Consider adding a second approver so answers do not queue.
• Exclusivity. Losing bidders are disabled, not deleted, so their activity stays in the log. The preferred bidder may get a clean team group for sensitive data.
• Signing and archive. Contributors lose upload rights once the disclosure set is frozen. Administrators export the archive and the audit trail. Our guide to closing and archiving a data room covers that last step.

Which role checks should you run before inviting anyone?

Run this list after the groups are built and before the first invitation goes out. It takes fifteen minutes.

• At least two named administrators on the seller side, each with two-factor login switched on
• No administrator, contributor or approver rights for anyone outside the seller’s team
• Every user has their own login; no shared accounts, even for a support team
• Contributors are limited to the folders they own
• Q&A experts are mapped to their categories, with a named backup for each
• Bidder lead rights granted only to the named lead at each bidder
• The room previewed as each bidder group and as one Q&A expert
• A written note of who holds which role, kept with the process letter

The last item sounds bureaucratic. It is the document you will want at 9pm on a Sunday when a bidder asks why their analyst cannot log in.

Do buy-side and fundraising rooms need different roles?

Yes, usually fewer.

On the buy side, the room is mainly an internal workspace for the acquirer’s diligence team and advisers. Most users are contributors, uploading notes, memos and the target’s documents as they arrive. Viewer roles go to steering committee members who read but do not edit. Q&A often lives in the seller’s room, not yours.

In a fundraise, the founder or CFO is owner and administrator, perhaps with the company’s counsel as a second administrator. Investors are viewers, often in one shared group because they are not competing for the same asset in the way bidders are. A lead investor and its counsel may get a separate group with wider access once a term sheet is signed. A bidder lead role is rarely needed.

For ongoing investor or board reporting rooms that stay open for years, the risk is drift: people change jobs and their access lingers. Set a quarterly review of every non-viewer role. Our board and investor reporting page covers how those long-running rooms are usually structured.

What should you look for in a provider’s role model?

When you compare platforms, three questions separate the flexible role models from the rigid ones.

Can you split Q&A drafting from Q&A approval? Some lighter tools have one Q&A permission: you can answer or you cannot. For a competitive sale with several experts, you want two.

Can a bidder lead manage their own team? Without it, every new analyst at every bidder becomes a request in your inbox.

Does the audit trail record role and permission changes, not just document views? You want to see that someone widened Bidder B’s access on a Tuesday, and who did it.

The leaders in our ranking of virtual data rooms, including Ellty, iDeals and Datasite, all support granular, group-based permissions with a structured Q&A module; differences show up in how quickly a new administrator can set them up. If your shortlist is still open, our setup guide shows where role decisions fit in the first week.