Summary and recommendation
15Five user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.
15Five uses a fixed role-based permission model with six predefined roles: Account Admin, HR Admin, Billing Admin, Group Admin, Manager, and Employee. No custom roles can be constructed. User management lives at Settings gear → People → Manage people page (https://app.15five.com/people/).
SCIM is available on all pricing packages, but SSO must be configured first. When SCIM or an HRIS integration is active, the manual 'Add a person' option is disabled - unlike every app that allows parallel manual and automated provisioning, 15Five forces a clean handoff to the IdP once SCIM is enabled.
Quick facts
| Admin console path | Settings gear (top-right) → People → Manage people page |
| Admin console URL | Official docs |
| SCIM available | Yes |
| SCIM tier required | All plans |
| SSO prerequisite | Yes |
User types and roles
| Role | Permissions | Cannot do | Plan required | Seat cost | Watch out for |
|---|---|---|---|---|---|
| Account Admin | Full platform control: add/deactivate users, assign all roles, manage company-wide settings, configure all features (Check-ins, Objectives, Engagement, HR Outcomes Dashboard), manage integrations, pull custom reports, manage billing by default. | Cannot view employee Check-ins or 1-on-1 agendas by default (requires Global Viewer role granted by 15Five Support). Cannot make another user an Account Admin unless they are already an Account Admin themselves. | All plans | Billable seat (same per-user rate as plan) | Only existing Account Admins can appoint other Account Admins. Billing Admins cannot elevate users to Account Admin. |
| HR Admin | All Account Admin permissions plus: access to demographic attributes and reporting (birth date, ethnicity, gender, race, salary), full Engagement survey results visibility, Review Admin permissions by default, HR Outcomes Dashboard access. | Cannot be self-appointed; only Account Admins can assign the HR Admin role. | Engage or Total Platform (for Engagement features); Perform or Total Platform (for Best-Self Review access) | Billable seat | HR Admins are automatically granted Review Admin permissions. This can be toggled off via Settings > Features > Best-Self Review > Review Administrators. |
| Billing Admin | View and manage payment methods, download invoices, update subscription plans. | Cannot manage users, settings, or features. Cannot appoint Account Admins. | All plans | Billable seat | Account Admins have billing rights by default; Billing Admin is a scoped role for finance-only access without full platform control. |
| Group Admin | Manage Check-in questions, edit individual settings, and update settings for assigned groups only. | Does not have visibility into all group members' Check-ins by virtue of the role alone. Not a group member by default-must be added separately. Cannot manage company-wide settings. | All plans | Billable seat | Only Managers or Account Admins can be assigned as Group Admins. Group Admins needing Check-in visibility outside their reporting line must request to follow those people. |
| Manager | View and manage direct reports' Check-ins, Objectives, Best-Self Review submissions, Feedback, and 1-on-1s. Can deactivate accounts for anyone in their reporting hierarchy. Can manage account settings for people in their hierarchy. | Cannot change company-wide settings. Cannot view Check-ins or 1-on-1s outside their reporting hierarchy without following permissions. | All plans | Billable seat | Manager loops are not permitted (no one can manage their own manager's manager). |
| Employee | Access core features available to them (Check-ins, Feedback, Objectives, High Fives). Manage own profile, notification preferences, and vacation schedules. | Cannot manage other users, company settings, or view others' data outside what is explicitly shared with them. | All plans | Billable seat upon accepting invite and activating account | Inactive (invited but not yet accepted) users are not billed unless manually assigned a billed seat by an admin for engagement survey participation. |
| Review Admin | Highest permission level for managing and creating Best-Self Review cycles. Can view all associated review results. | Review Admin is a feature-specific role, not a platform-wide admin role. Does not grant broader platform control. | Perform or Total Platform | Billable seat | Must be appointed by an Account Admin. HR Admins receive this role by default. |
| Global Viewer | Full visibility into all manager-reporter 1-on-1 agendas and/or Check-ins company-wide. | Does not include visibility into peer-to-peer 1-on-1s. | Perform or Total Platform (for 1-on-1s) | Billable seat | Global Viewer role is not self-assignable. It is only granted by 15Five Support to HR leaders who meet specific criteria (e.g., legal necessity or specific HR-related reasons). |
Permission model
- Model type: role-based
- Description: 15Five uses a fixed role-based permission model. Each user is assigned one or more predefined roles (Account Admin, HR Admin, Billing Admin, Group Admin, Manager, Employee) that determine platform access. Some features (Engagement, Best-Self Review, 1-on-1s) have their own additional specialized roles layered on top of general roles. Engagement results visibility can be set as role-based (default) or custom (Full, Limited, Limited+Groups) per individual.
- Custom roles: No
- Custom roles plan: Not documented
- Granularity: Role-level with some per-feature visibility overrides (e.g., Engagement results access: Full, Limited, Limited+Groups assignable per user). No arbitrary permission set construction. Fields synced from HRIS/IdP integrations are locked from manual editing in-app.
How to add users
- Click the Settings gear in the top-right corner of 15Five.
- Select 'People' from the dropdown to open the Manage people page.
- Click 'Add a person' in the top-right corner of the screen.
- Fill in the required fields: First name, Last name, and Email.
- Optionally set: manager, group membership, Check-in frequency, start date, and permissions (e.g., Account Admin checkbox).
- Check 'Send invite email' if you want the user to receive an invitation immediately, or leave unchecked to send later.
- Click Save or Save and add another.
- New user appears under 'Pending invitations' (if invite sent) or 'Created people' (if invite not sent) in the Invited tab of Manage people.
Required fields: First name, Last name, Email
Watch out for:
- If the company is integrated with SCIM or an HRIS, the 'Add a person' option may not be visible or may be disabled for manual additions.
- Invitations expire after 30 days; expired invites must be resent or reset.
- Admin cannot edit an invited user's profile settings (e.g., manager, reviewer) until the user accepts the invite and activates their account.
- If a maximum user limit is set in company settings, adding users beyond that limit will produce an error until unused accounts are deactivated or the limit is increased.
- If SSO is enabled and the user is granted access in the IdP, they appear in the 'Created' section of the Invited tab automatically and do not need a separate invite email to log in.
- Updating a user's email address in 15Five before updating it in the IdP (when SSO is active) will create a duplicate account.
| Bulk option | Availability | Notes |
|---|---|---|
| CSV import | Yes | Settings gear → People → Import tab (bulk import page). Download current structure first, edit CSV, upload. |
| Domain whitelisting | No | Automatic domain-based user add |
| IdP provisioning | Yes | All plans (SCIM available on all pricing packages; SSO prerequisite recommended) |
How to remove or deactivate users
- Can delete users: No
- Delete/deactivate behavior: 15Five does not offer a standard in-app delete function. Deactivation is the standard offboarding action. Permanent PII deletion requires contacting 15Five Support, who can grant the ability to PII-delete a person's data. Deactivated users remain in the Deactivated tab and can be reactivated.
- Click the Settings gear in the top-right corner of 15Five.
- Select 'People' from the dropdown to open the Manage people page.
- Find the user in the Active tab using the search bar or filters.
- Click the user's name to open their account settings page.
- Click 'Deactivate [Name]'s account' (typically in the top-right of the profile page).
- If the user has direct reports, reassign those reports before deactivation can complete.
- Confirm deactivation. The user is moved to the Deactivated tab.
- Alternatively, use the Actions dropdown on the Active tab to bulk deactivate multiple users at once.
- For CSV bulk deactivation: include the 'is_active' column with value 'n' for target users in a bulk import CSV.
| Data impact | Behavior |
|---|---|
| Owned records | Objectives owned by the deactivated user remain visible but must be reassigned. For Group or Company-wide objectives, 15Five prompts for a new owner on next edit. Historical review results remain visible to anyone who had prior visibility; HR Admins can still download full review history post-deactivation. |
| Shared content | Past Check-ins remain visible to the direct manager at time of deactivation and to others with hierarchy-based visibility, but group-level and follower visibility no longer applies. 1-on-1 agendas become inaccessible to all parties after deactivation regardless of when they occurred-content should be downloaded before deactivation. Past engagement survey responses are removed upon deactivation but restored if the user is reactivated and had previously completed the survey. |
| Integrations | If SCIM or HRIS integration is active, deactivation should be performed in the IdP or HRIS rather than manually in 15Five. Manual deactivation in 15Five when SCIM is enabled may be overwritten and the user reactivated during the next sync. |
| License freed | Deactivated users are removed from future billing. However, on annual contracts, the vacant seat is retained for the remainder of the subscription period with no refund or credit issued. Vacant seats are filled first before new seats are charged when additional users are added. |
Watch out for:
- On annual subscriptions, deactivating a user does not reduce the current contract cost-the seat remains paid through the end of the subscription term.
- If SCIM is enabled, manual deactivation in 15Five may be overwritten at the next sync; deactivation must be managed in the IdP.
- Users with direct reports must have those reports reassigned before deactivation can be completed.
- 1-on-1 agendas become permanently inaccessible after deactivation; a Global Viewer should download or print agendas before deactivating the user.
- Deactivation date is not used in turnover calculations-a termination date must be separately recorded in the Terminated tab for accurate HR Outcomes Dashboard metrics.
- Turnover scorecard only reflects employees with a recorded termination date, not just deactivated accounts.
License and seat management
| Seat type | Includes | Cost |
|---|---|---|
| Engage | Employee engagement surveys, analytics, and outcomes. Engagement Admin (HR Admin) role for survey management. | $4/user/month (billed annually) |
| Perform | Engage features plus performance management: Check-ins, Best-Self Review, 1-on-1s, Objectives/OKRs, Feedback, Career Hub. | $11/user/month (billed annually) |
| Total Platform | Engage + Perform plus HR Outcomes Dashboard, manager enablement micro-learnings, and additional strategic HR features. | $16/user/month (billed annually) |
| Mercer Compensation Add-on | Compensation benchmarking data via Mercer integration. | $2/user/month (billed annually) |
| Kona AI Coaching Add-on | AI-powered manager coaching delivered in real-time via Slack and 15Five. Available on Perform or Total Platform only. | $19/user/month (billed annually) |
- Where to check usage: Settings gear → Billing tab → Manage Billing Details (opens Billing Portal). Active tab of Manage people page shows all billable active users. Invited tab shows users with optional billed seat assignments.
- How to identify unused seats: Review the Active tab on the Manage people page for users who have not submitted Check-ins or engaged with the platform. No native 'last login' report is documented in the Help Center; admins can use custom reports filtered by hierarchy and follow settings to identify inactive participants. Deactivated tab shows previously active users who have been offboarded.
- Billing notes: All plans billed annually. Active users (accepted invite) automatically fill a billable seat. Inactive/invited users are not billed unless manually assigned a billed seat by an admin (for engagement survey eligibility). New seats added mid-subscription are prorated to the monthly anniversary date. Deactivated users' seats are retained for the remainder of the annual contract with no refund or credit. Vacant seats from deactivations are filled first before additional seats are charged when new users are added.
The cost of manual management
Managing every app in your stack by hand compounds quickly in 15Five specifically because deactivation errors carry real cost. On annual contracts, deactivating a user does not release the paid seat - the cost runs through the end of the subscription term with no refund or credit.
Vacant seats from deactivations are filled before new seats are charged, so timing matters. Beyond billing, 1-on-1 agendas become permanently inaccessible after deactivation, requiring proactive export before offboarding.
Admins also cannot edit an invited user's profile - including manager or reviewer assignment - until that user accepts the invite and activates their account, creating a gap window for onboarding flows that rely on accurate reporting-line data from day one.
What IT admins are saying
Practitioners flag several recurring friction points. Manual deactivation inside 15Five can be silently overwritten at the next SCIM or HRIS sync, meaning deactivation must always be managed in the IdP when an integration is active.
JIT provisioning conflicts with SCIM and should be disabled to prevent duplicate accounts.
One G2 reviewer noted that 'some features can feel a bit limited without customization, and certain advanced options are only available in higher plans.' A legacy note from 15Five's FAQ states that 'bulk imports are not available for SCIM customers,' though this should be verified against current SCIM documentation.
HR Admins are automatically granted Review Admin permissions on assignment - this can be toggled off but is easy to miss.
Common complaints:
- SSO prerequisite for best SCIM experience
- JIT conflicts with SCIM/HRIS integrations
- Manual deactivation in 15Five can be overwritten by the next SCIM or HRIS sync, requiring deactivation to be managed in the IdP instead
- Admin cannot edit an invited user's profile (e.g., manager, reviewer assignment) until the user accepts the invite and activates their account
- Deactivating a user on an annual contract does not free the paid seat cost for the remainder of the subscription-no refunds or credits are issued
- 1-on-1 agendas become permanently inaccessible after user deactivation, requiring proactive data export before offboarding
- Global Viewer role (for Check-in and 1-on-1 visibility) is not self-assignable and requires contacting 15Five Support with qualifying justification
- Bulk CSV import is not available for SCIM-enabled customers (per legacy Comparably FAQ; verify current behavior with 15Five Support as Azure AD SCIM docs suggest CSV import may still be an option)
- Some advanced features (Best-Self Review, 1-on-1s, Career Hub) are gated to Perform or Total Platform plans, requiring plan upgrades for access
- Updating a user's email in 15Five before updating it in the SSO/IdP creates duplicate accounts
Representative quotes (verbatim):
Bulk imports are not available for SCIM customers.
- 15Five FAQ via Comparably (legacy note; verify against current SCIM documentation) (https://www.comparably.com/companies/15five/faqs)
Some features can feel a bit limited without customization, and certain advanced options are only available in higher plans.
- G2 reviewer (verified current user), collected on G2.com (https://www.g2.com/products/15five/reviews)
The decision
Manual management is viable only for small, stable teams not yet using an IdP integration. Once SCIM is active, the UI blocks manual user addition entirely, and any manual deactivation risks being overridden at the next sync - a dynamic that differs from every app that permits mixed provisioning modes.
Teams on annual contracts should treat seat lifecycle as a planning exercise, not a reactive one, since deactivated seats do not generate credits. For organizations where manager and reviewer assignments must be accurate at hire, the invited-but-not-activated gap is a meaningful risk that manual processes cannot fully close without IdP-driven provisioning.
Bottom line
15Five's manual user management is straightforward for small teams but becomes operationally fragile at scale.
The combination of annual seat billing with no mid-term credits, SCIM overwriting manual deactivations, and a blocked 'Add a person' UI once SCIM is enabled means that manual processes and IdP-driven provisioning cannot safely coexist.
Organizations running 15Five alongside an IdP should commit fully to automated provisioning and treat the admin console as a read-and-verify surface rather than a write surface.
Automate 15Five workflows without one-off scripts
Stitchflow builds and maintains identity workflows for your exact setup. We cover every app, including the ones without APIs, and run deterministic trigger-to-report workflows with human approvals where they matter.