User management and access levels
Only people you explicitly let in can sign in to SignatureCat: Workspace super admins (always allowed), users with a direct access grant, and members of groups you granted access to. Everyone else is turned away at login. Access is managed on the User management page (Admins only).
What does each access level allow?
| Access level | What it allows |
|---|---|
| Self-service | Sets their own signature from organization templates only. |
| Self-service + edit | Self-service plus their own custom HTML signature. |
| Designer | Edits organization signature templates. |
| Editor | Designer plus managing assignments and apply jobs, and in-app notifications. |
| Admin | Full access, including billing, user management, image domains and the DWD wizard. |
A few practical consequences:
- Templates (Signatures): Designer, Editor, Admin.
- Assignments and Apply (Assignments, Apply): Editor, Admin.
- Billing, user management, custom image domain: Admin only.
- Editors see in-app notifications; alert and billing emails go to admins only.
Who can sign in?
Sign-in is Google-only and requires a Google Workspace account in your domain. When someone without access tries, they see: "Your account doesn't have access to SignatureCat yet. Ask a Workspace super admin to grant you access, then sign in again." - and nothing is changed in your workspace.
Sessions last up to 7 days of inactivity with a hard cap of 14 days, then a one-click Google re-login is needed.
Grant access to a single user
- Open User management and click Add access.
- On the User tab, enter the email address (it must belong to your Workspace, secondary domains included).
- Pick an access level and click Save access.
The user receives a "You now have access to signature.cat" email invitation.
A direct user grant always overrides any group grant for that person - even if the group grant is stronger.
Grant access to a whole Google group
- In the same drawer, switch to the Group tab.
- Paste the group email (for example
engineering@example.com), pick the level and save.
Removing and changing access
- Edit or remove grants from the same page. Removing a grant blocks the next sign-in; it does not remove a signature that is already applied to the mailbox.
- You cannot change or remove your own access - another admin has to do it (the UI shows a "You" badge instead of the controls).
- Access levels only control the SignatureCat app. They have no effect on the user's Google account.
Letting users manage their own signature
Grant users (or a group) the Self-service level and enable at least one template for self-service - the full flow is described in Self-service.