Docusign User Management Guide

• Model type: permission-sets
• Description: Docusign uses Permission Profiles - named sets of granular permissions assigned to users. Built-in profiles include 'DS Admin', 'DS Sender', and 'DS Viewer'. Admins can create custom permission profiles on Business Pro and Enterprise plans. Profiles control capabilities such as sending envelopes, managing templates, using bulk send, accessing reporting, and sharing envelopes.
• Custom roles: Yes
• Custom roles plan: Business Pro and Enterprise
• Granularity: Granular: individual toggles for sending, template management, bulk send, shared access, reporting, API access, and more within each permission profile.

1. Log in to Docusign as an Account Administrator.
2. Navigate to Settings (gear icon, top right) → Users & Groups → Users.
3. Click 'Add User'.
4. Enter the user's first name, last name, and email address.
5. Select a Permission Profile (e.g., DS Sender, DS Admin, or a custom profile).
6. Optionally assign the user to one or more Groups.
7. Click 'Add User' to send an activation email to the new user.
8. The user must click the activation link in the email to set their password and activate their account.

Required fields: First name, Last name, Email address, Permission Profile

Watch out for:

• Adding a user immediately consumes a paid seat and may trigger a prorated billing charge if at the seat limit.
• The activation email expires; if the user does not activate within the expiry window, the admin must resend the invitation.
• Email address must be unique across all Docusign accounts; if the email is already associated with another Docusign account, the user will be prompted to merge or use a different address.
• On the Personal plan, only one user (the account owner) is supported; additional users require upgrading to Standard or above.
• Users added via the admin console are not automatically provisioned into CLM or other Docusign products - each product requires separate user setup.

• Can delete users: No
• Delete/deactivate behavior: Docusign does not allow permanent deletion of user accounts from the admin console. Users can only be 'closed' (deactivated). A closed user cannot log in or send envelopes, but their account record and all associated envelope history are retained. The user's email address remains tied to the account and cannot be reused for a new user on the same account.

1. Log in to Docusign as an Account Administrator.
2. Navigate to Settings → Users & Groups → Users.
3. Locate the user using search or the user list.
4. Click the user's name to open their profile.
5. Click 'Close User' (or select 'Close' from the Actions menu).
6. Confirm the action in the dialog. The user's status changes to 'Closed' immediately.

Watch out for:

• A closed user's email address cannot be reused for a new user on the same Docusign account, which can cause issues when employees are rehired or change email addresses.
• Closing a user does not automatically reassign their in-progress envelopes; any envelopes awaiting action may stall and require manual intervention by an admin.
• Admins cannot bulk-close users from the UI; each user must be closed individually through the admin console.
• If the closed user was the sole admin on the account, another user must be promoted to admin before closing them.
• SCIM-provisioned users closed via the IdP are deactivated in Docusign, but the same email-reuse restriction applies.

• Where to check usage: Settings → Billing & Usage → Plan & Billing (shows current seat count, seats used, and envelope consumption)
• How to identify unused seats: Navigate to Settings → Users & Groups → Users and filter by 'Last Login' date or sort by activity. Users who have never logged in or have not logged in recently can be identified for deactivation. There is no built-in automated 'inactive user' report; admins must manually review the user list.
• Billing notes: Seats are billed per user per month. Adding users mid-cycle results in prorated charges. Closing (deactivating) a user frees the seat for reassignment but does not automatically reduce the contracted seat count - seat count reductions require contacting Docusign sales or waiting for contract renewal. Annual plans carry a 30-day refund guarantee. SAML SSO on Enterprise requires a one-time activation fee in addition to per-seat costs.

Adding a user immediately consumes a paid seat and may trigger a prorated charge if you are at your seat limit. Closing a user frees the seat for reassignment but does not reduce your contracted seat count - that requires contacting Docusign sales or waiting for renewal.

There is no bulk-close option in the admin UI, so every offboarding is a one-at-a-time operation. Identifying unused seats also requires manual review: Docusign has no built-in inactive-user report, so admins must sort the user list by last-login date themselves.

The friction points that surface most consistently from Docusign admins center on three areas. First, closed user email addresses cannot be reused on the same account - a hard constraint that causes real problems when employees are rehired or email addresses need correction.

Second, CLM and eSignature user management are entirely siloed; a change in one product does not propagate to the other, requiring duplicate admin work.

Third, the one-time SAML SSO activation fee on Enterprise is frequently flagged as an unexpected cost not prominently disclosed during the sales process.

Common complaints:

• One-time activation fee for SAML SSO on top of enterprise pricing is unexpected and not prominently disclosed during sales.
• Closed user email addresses cannot be reused on the same account, causing friction when rehiring employees or correcting email address mistakes.
• No bulk-close option in the admin UI; admins must deactivate users one at a time.
• No built-in inactive user report; identifying unused seats requires manual review of last-login dates.
• CLM and eSignature user management are siloed - changes in one product do not propagate to the other.
• Limited permission profile granularity with some IdP integrations; not all permission profile assignments sync correctly via SCIM.
• Activation emails for new users can expire without clear notification to the admin, leaving users unable to log in.
• Seat count reductions require contacting sales and cannot be self-served through the admin console.

Manual management is viable for teams with stable headcount and infrequent onboarding cycles, particularly on Standard or Business Pro plans where SCIM is not available. Once your organization is adding or removing users regularly, the absence of bulk actions and inactive-user reporting turns routine hygiene into a recurring time sink.

Every app that touches identity at scale eventually hits the same ceiling: per-user manual steps do not compress. If your team is on Enterprise and has an IdP already configured for SAML, enabling SCIM is the operationally sound path forward.

Bottom line

Docusign's admin console gives Account Administrators direct control over user provisioning, permission profiles, and seat assignment, but the manual workflow has hard limits: no bulk deactivation, no automated inactive-user detection, and a closed-user email reuse restriction that creates friction at offboarding.

Seat costs accrue immediately on user creation and do not self-correct when users are closed, so license hygiene requires active attention.

For organizations on Enterprise with SSO already in place, SCIM provisioning removes the per-user manual overhead and is the recommended approach for any team managing more than a handful of seats.