Table of Contents
When your small or medium-sized business (SMB) starts growing, so does your support team. Managing who can do what within your helpdesk becomes critical, not just for security, but for efficiency. Getting the permissions and roles wrong can lead to chaos—agents accidentally deleting data, viewing confidential reports, or seeing tickets that aren't relevant to them. That's why mastering how you manage Zendesk users is a foundational step in effective SMB team management.
Managing Zendesk users and their access ensures that every member of your team has exactly what they need to succeed, without unnecessary clutter or security risks. This guide will focus on simple, non-technical best practices for setting up roles and permissions within Zendesk Support, ensuring your SMB team management is secure, streamlined, and scalable.
Why Controlling Roles and Permissions is Key to SMB Team Management
In a small business, agents often wear many hats, but they still need structure. A well-defined system of roles and permissions offers immediate benefits:
- Security: Prevents junior agents from accessing sensitive data like financial metrics or customer credit card details (if they are stored or discussed in tickets).
- Focus & Efficiency: Agents only see the tickets, views, and settings relevant to their job. Less distraction means more time spent solving customer issues.
- Compliance: Ensures you can easily prove that only authorised personnel have access to certain customer information, which is important for any small business.
- Scalability: When you hire a new agent, you simply assign them a pre-defined role, cutting down on setup and training time.
1. Differentiating Between Zendesk Users: Agents vs. End-Users
The most basic step in managing Zendesk users is understanding the two primary types:
- Agents (Staff Users): These are your employees who log in to the Zendesk Support interface to solve tickets. They consume a paid license. They are defined by their roles and permissions.
- End-Users (Customers): These are the people who submit tickets. They do not need a paid license and only interact with the Help Centre or the email/chat interfaces.
Best Practice: Always keep your end-users separate and use customer tags or organisation fields to note their value (e.g., VIP, new_customer, enterprise_tier). This is vital for smart ticket routing and automation.
2. Defining Agent Roles and Custom Permissions
Zendesk comes with standard roles like 'Admin' and 'Agent,' but for practical SMB team management, you should create custom roles tailored to your team's structure. You need to assign the right level of permissions for daily tasks.
Core Roles Every SMB Should Use
You only need three to four clear roles to cover most small business support operations:
- Admin: Full access to all settings, billing, and system configuration. Limit this to 1-2 people (owner, operations manager).
- Senior Agent / Team Lead: Can see all reports (Zendesk Explore), view all tickets (regardless of group), and manage user accounts (e.g., merging duplicates). They cannot change critical security or billing settings.
- Standard Agent: Can only see tickets assigned to them or their group. They can use macros, solve tickets, and access the knowledge base. They cannot access reports or administrative settings.
Custom Permissions Checklist
When setting up your Standard Agent role, ensure you restrict these key permissions to prevent mistakes and maintain security:
| Permission Area | Action to Restrict for Standard Agents | Why |
|---|---|---|
| Tickets | Prevent editing user profiles or deleting tickets. | Stops accidental data loss or manipulation of customer records. |
| Reporting | Prevent access to Zendesk Explore (analytics). | Reports are sensitive and complex; limit access to those who actively use the data. |
| Settings | Prevent access to Triggers, Automations, and Views. | Prevents accidental changes to the core workflow and ticket routing rules. |
| Users | Prevent assigning tickets to users outside their Group. | Ensures proper adherence to the predefined SMB team management structure. |
3. Using Groups for Effective Team Management
In addition to roles (which define what you can do), Groups define what you can see. Groups are essential for SMB team management, allowing agents to focus on tickets relevant to their speciality.
If your small business has different functions, you should have different groups:
- Billing/Finance Group: Handles payments, subscriptions, and refunds.
- Technical Support Group: Handles bugs, integrations, and complex setup issues.
- Sales Group (Optional): Handles pre-sales questions, pricing, and demos.
Best Practice for Group Permissions: Configure your views so that Standard Agents only see views containing tickets assigned to their primary group. This ensures every agent's dashboard is clean and relevant, maximizing efficiency. Learn how Optimo can help you optimise your Zendesk groups and workflows.
4. Onboarding and Offboarding Zendesk Users Securely
The process of adding and removing Zendesk users is a critical security step for any SMB.
Onboarding
When a new agent joins your team:
- Create User Profile: Add the agent's name, email, and internal phone number.
- Assign Role & Group: Immediately assign the correct, restricted role (e.g., 'Standard Agent') and their primary group (e.g., 'Technical Support Group'). This prevents them from seeing inappropriate tickets from day one.
- Set Agent Workspace: Ensure their default agent workspace is configured with the right apps and macros for their role.
Offboarding
When an agent leaves, their license must be deactivated immediately:
- Change Role to End-User: The fastest way to deactivate access is to change their roles from 'Agent' to 'End-User.' This immediately frees up the paid license and restricts system access.
- Reassign Tickets: Before changing the role, ensure all their assigned tickets are reassigned to their former Group or a Team Lead.
- Delete/Redact Data: Depending on company policy, you may need to delete their account entirely to remove personally identifiable information, or simply deactivate it for record-keeping.
By following these simple steps for managing Zendesk users and permissions, your small business will establish a secure, efficient, and professional support operation that is ready to scale. Optimo is an official Zendesk Partner ready to help you implement and maintain these core SMB team management structures.
