# Admin and security

Confidently deploy and manage Asana across any organization, no matter how large.

### Protect access to your work

Secure your workspace with extra layers of protection. Add two-factor authentication, password requirements, and more to protect your company’s work.

### Protect information within your organization

Right-size permissions to protect company data. With permission levels and admin controls, you can give users the access they need while keeping specific information and settings off limits.

### Keep work safe and meet compliance obligations

Flexible data management to help you meet global, regional, and industry regulations. Stay in control of critical information so you and your customers can rest easy.

## Security you can count on

85% of Fortune 100 companies use Asana. We provide data security, privacy controls, and peace of mind.

##### Authentication

- SAML
- Google SSO
- Two-factor authentication
- Org-wide password strength

##### User management

- SCIM
- Session duration limits
- Guest invite restrictions

##### Access control

- Access levels
- Object-level admin controls
- Centralized admin controls
- Custom RBAC roles

##### Data control

- Domain export
- Domain deletion
- Export team/user CSV
- Service accounts

##### Data compliance

- Data centers in US, Europe, Japan, and Australia
- HIPAA compliance
- Enterprise key management (EKM)

##### Advanced data security

- Audit Log API
- Security information event management (SIEM) integration
- Data loss prevention (DLP) integration
- eDiscovery integration
- Archiving integration
- CASB integration
- IP allowlisting

##### Integration management

- App blocking
- App approval mode

##### Mobile security controls

- Biometric authentication
- Screen capture permissions
- Attachment permissions

## Asana AI Studio

Design AI-powered workflows to handle your teams' busywork.

## Scale confidently with Asana

Get the oversight and control you need to manage Asana at scale, without unnecessary manual work.

#### Admin console

Manage settings for your entire organization, in one place.

#### Permissions and access controls

Maintain data privacy by customizing who can access work across Asana.

#### Compliance management

Enable access to activity logs, integrate tools, and add controls such as CASB and IP allowlisting.

#### Sandboxes

Test new features to ensure they integrate seamlessly into your existing workflows and to create thoughtful rollout plans.

#### Multi-org deployment

Meet privacy, security, and compliance standards by customizing each business unit's settings.

#### Trust at Asana

Protect your organization's data with a secure platform that scales for the largest enterprises.

## Go deeper

Admin and security is just the start. See what else you can do with Asana.

##### Project and task management

Track work from start to finish, so every team stays in sync and on schedule to hit their goals.

##### Workflow automation

Create processes that run themselves, so your team can focus on the next big thing.

##### Goals and reporting

Connect every team’s work to company objectives, then track progress with real-time data.

##### Resource management

Get the visibility you need. Plan accurate timelines, adjust workloads, and stay on track no matter what happens.

## Still have questions? We have answers.

##### Which Asana plans include the admin console?

The admin console is available on Asana's [Starter](/content/plan/starter/index.html), [Advanced](/content/plan/advanced/index.html), [Enterprise, and Enterprise Plus](/content/enterprise/index.html) plans. It is not available on free plans.

##### Who can access the admin console?

Access to the admin console is available to Super Admins, Admins, and Billing Owners in Asana, each with different access scopes and privileges in the console.

##### What security features can I enforce for user login?

The security features you can enforce for user login include Google SSO, SAML authentication, two-factor authentication (2FA), session duration limits, and password strength requirements.

##### How do I manage user provisioning and deprovisioning?

To manage user provisioning and deprovisioning, use SCIM provisioning and deprovisioning to automate group sync, user creation, and removal. You can also add and deactivate users manually in the admin console.

##### How can I control guest user access?

You can control guest user access by setting guest invite restrictions and managing guest permissions, limiting their ability to see or invite others.

##### What permission levels are available for projects and goals?

The permission levels available for projects and goals include role-based access with levels for projects (Admin, Editor, Commenter, Viewer) and goals (Editor, Viewer). Workspace roles include Super Admin, Admin, Member, and Guest.

##### What mobile security controls are available?

The mobile security controls available in Asana allow admins to enforce biometric authentication, mobile screen capture restrictions, file attachment permissions, and Intune integration for iOS.

##### What data control and export options are available?

The data control and export options available in Asana include domain export, domain deletion, export team/user CSV, and service accounts. The Audit Log API supports SIEM, DLP, eDiscovery, and archiving integrations.

##### Where are Asana's data centers located and what compliance standards are met?

Asana's data centers are located in the US, Europe, Japan, and Australia. Asana meets HIPAA compliance and supports Enterprise Key Management (EKM).

##### What admin security controls are available for file attachments and team privacy?

The admin security controls available for file attachments and team privacy allow you to set controls on file attachment types, team privacy settings, and define organization-wide sharing permissions.

##### Can I integrate with SIEM, DLP, and CASB tools?

You can integrate with SIEM, DLP, and CASB tools in Asana. Asana supports Security Information Event Management (SIEM), Data Loss Prevention (DLP), CASB, eDiscovery, archiving, and Splunk integration.
