Emma works with two layers of permissions: (1) organization-level roles and (2) deal-level roles.
1. Organization-level roles
These roles govern access across your entire Emma environment:
User: Users can create new data rooms and view the data rooms they have access to within the organization. This is the default role for internal team members who are actively involved in deal work.
Admin: Admins retain all User permissions, but also manage access. They can invite new colleagues, remove users, and oversee the overall membership of the organization.
In Settings > Members, you’ll also find external collaborators who only have access to a specific data room. For a complete view of who can access what, the Settings > Data Rooms page provides a structured breakdown.
In Settings > Members page, you can also enable authorized domains which will allow everyone with an email address of that domain to access this organization as a user.
2. Deal-level roles
These roles determine what a person can see and do inside a particular deal. They allow you to align access with responsibilities on each deal.
Report Viewer: Has read-only access to the final report. They do not see underlying documents or the detailed workspace.
Domain Responsible: Can view the Overview and Documents pages, but only for the domains or areas assigned to them. Ideal for subject-matter experts who review a specific scope.
Contributor: Has full visibility across the entire data room and all documents. This is the standard role for lawyers actively involved in the review.
Deal Responsible: Holds full access and oversees role management within that data room. They can assign, adjust, or revoke data-room roles via the data room’s Settings.
Important note: if your deal is connect to an external data room, please make sure that the data room permissions are aligned with those set in Emma.
How Emma displays errors for insufficient permissions
When you try to access a part of Emma you do not have permission for, the platform will now show a clear error screen explaining why access is restricted:
Forbidden screen: If your account does not have permission to view a page, or tries to access a resource outside your assigned organizations or data rooms, you will see a message stating "You don't have access to this resource". This screen will also suggest returning to your organizations or contacting your administrator.
Unauthorized screen: If you are not signed in or your session has expired, you will see a message prompting you to sign in before continuing.
These dedicated error screens clarify whether you are missing access because of your current role, a configuration issue, or because you are not signed in. If you believe you should have access, you can use the contact support option visible on the error page or reach out to your organization's administrator.
If you need additional help with access management or you encounter any other problem, don't hesitate to reach out to us through the chat bubble in the bottom right or to contact [email protected]