Summary and recommendation
Gong user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.
Gong user management is centralized under Settings → Company Settings → Users (https://app.gong.io/settings/users) and is restricted to Technical Administrators. The permission model is role-based with three fixed roles - Technical Administrator, Manager, and Sales Rep - and no per-user overrides or partial admin configurations.
Data visibility is scoped by org hierarchy, which must be synced correctly from your CRM or configured manually; a misconfigured hierarchy means managers see too much or too little across every app that feeds Gong.
Gong does not support permanent user deletion. Deactivated users cannot log in and stop consuming a billable seat, but their call recordings and historical data remain accessible to admins and managers indefinitely.
Quick facts
| Admin console path | Settings → Company Settings → Users |
| Admin console URL | Official docs |
| SCIM available | Yes |
| SCIM tier required | Enterprise |
| SSO prerequisite | Yes |
User types and roles
| Role | Permissions | Cannot do | Plan required | Seat cost | Watch out for |
|---|---|---|---|---|---|
| Technical Administrator | Full system access: manage users, roles, integrations, SSO/SCIM configuration, data retention, and all company-wide settings. | Cannot be restricted to a subset of admin functions; all-or-nothing admin role. | All plans | Counts as a licensed seat | Only Technical Administrators can manage other users and configure integrations; there is no partial admin role. |
| Manager | Can view calls and activity for direct reports and their teams; access team-level analytics and coaching features; manage team workspaces. | Cannot access calls or data outside their reporting hierarchy; cannot manage system-level settings. | All plans | Counts as a licensed seat | Manager visibility is determined by the org hierarchy configured in Gong; if the CRM hierarchy is not synced correctly, managers may see too much or too little. |
| Sales Rep (User) | Can view own calls, recordings, and personal analytics; participate in call review and coaching flows. | Cannot view other users' calls unless explicitly shared; no access to team-level analytics or admin settings. | All plans | Counts as a licensed seat | Users added via SCIM provisioning are created with no Gong access by default until a license and role are explicitly assigned. |
| Non-Recording User (Limited/Viewer) | Can view shared calls and snippets sent to them; no recording capability. | Cannot record calls; cannot access analytics dashboards; cannot be assigned a team. | Availability varies by contract; typically a reduced-cost or free seat type for stakeholders who only need to view shared content. | Typically lower cost or no cost depending on contract; confirm with Gong account team. | Not all contracts include viewer/non-recording seat types; must be negotiated at time of purchase. |
Permission model
- Model type: role-based
- Description: Gong uses a fixed set of built-in roles (Technical Administrator, Manager, Sales Rep). Permissions are assigned at the role level and are not individually configurable per user. Data visibility is further scoped by org hierarchy (team structure) synced from CRM or configured manually. There are no fully custom roles.
- Custom roles: No
- Custom roles plan: Not documented
- Granularity: Role-level only; no per-user permission overrides. Data access scope is controlled by team hierarchy configuration, not individual permission grants.
How to add users
- Log in as a Technical Administrator.
- Navigate to Settings → Company Settings → Users.
- Click 'Invite Users' or 'Add User'.
- Enter the user's email address, first name, and last name.
- Select the user's role (Technical Administrator, Manager, or Sales Rep).
- If applicable, assign the user to a team or manager in the org hierarchy.
- Click 'Send Invitation'. The user receives an email to activate their account.
Required fields: Email address, First name, Last name, Role
Watch out for:
- Users provisioned via SCIM are created with no Gong access by default; a Technical Administrator must assign a role and license after provisioning.
- If SSO is enforced, users cannot set a password and must authenticate via the configured IdP; invitation emails direct them to SSO login.
- Adding a user consumes a licensed seat immediately upon invitation, not upon first login.
- Team/manager hierarchy assignment must be correct at time of creation or data visibility will be misconfigured.
| Bulk option | Availability | Notes |
|---|---|---|
| CSV import | Yes | Settings → Company Settings → Users → Import Users (CSV upload option available in admin console) |
| Domain whitelisting | No | Automatic domain-based user add |
| IdP provisioning | Yes | Enterprise |
How to remove or deactivate users
- Can delete users: No
- Delete/deactivate behavior: Gong does not permanently delete user accounts. Users can only be deactivated (set to inactive status). Deactivated users cannot log in and do not consume a billable seat, but their historical call data, recordings, and activity remain in the system and are accessible to administrators and managers.
- Log in as a Technical Administrator.
- Navigate to Settings → Company Settings → Users.
- Locate the user by name or email using the search or filter.
- Click the user's name to open their profile.
- Click 'Deactivate User' (or the equivalent action button).
- Confirm the deactivation in the dialog prompt.
| Data impact | Behavior |
|---|---|
| Owned records | All calls recorded by or associated with the deactivated user remain in Gong and are accessible to admins and managers with appropriate hierarchy access. |
| Shared content | Shared call links, snippets, and playlists created by the deactivated user remain accessible to recipients who had prior access. |
| Integrations | CRM sync entries (e.g., Salesforce activity logs) written by Gong on behalf of the user are retained in the CRM. The Gong-CRM integration for that user stops updating after deactivation. |
| License freed | Deactivating a user frees the licensed seat, making it available for reassignment. Seat reduction for billing purposes depends on contract terms and renewal cycle. |
Watch out for:
- Deactivation does not automatically reassign the user's team members to a new manager; org hierarchy must be manually updated.
- If the user was the sole Technical Administrator, deactivating them without first promoting another admin will lock out admin access.
- Seat count reduction for billing may not take effect until the next billing cycle or contract renewal; confirm with Gong account team.
- SCIM-based deprovisioning (via IdP) triggers deactivation in Gong automatically when the user is removed from the IdP, but only if SCIM is correctly configured.
License and seat management
| Seat type | Includes | Cost |
|---|---|---|
| Full License (Recording User) | Call recording, analytics, coaching, CRM integration, full platform access based on assigned role. | Approximately $120–$250/user/month depending on contract tier and negotiation; exact pricing requires a quote. |
| Non-Recording / Viewer Seat | View-only access to shared calls and snippets; no recording capability; no analytics dashboards. | Reduced cost or included at no additional charge depending on contract; must be negotiated. |
- Where to check usage: Settings → Company Settings → Users - filter by Active/Inactive status to review current licensed seat consumption. Billing summary may also be available under Settings → Billing (availability depends on contract type).
- How to identify unused seats: Filter the Users list by 'Last Active' date to identify users who have not logged in or recorded calls recently. Gong does not provide a native 'unused seat' report; admins must manually review last-activity data.
- Billing notes: Gong pricing is contract-based with three components: annual platform fee, per-user license fee, and a mandatory implementation fee. Seat counts are typically locked for the contract term. Adding seats mid-term is prorated; removing seats generally does not reduce cost until renewal. Auto-renewal uplifts of 5–15% are common. Early termination penalties of 50–100% of remaining contract value have been reported. All pricing requires direct negotiation with Gong sales.
The cost of manual management
Gong's pricing has three mandatory components: an annual platform fee, a per-user license fee, and a mandatory implementation fee. Seat counts are locked at contract signing; removing users mid-term does not reduce billing until renewal, and auto-renewal uplifts of 5–15% are standard.
SCIM provisioning is gated behind the Enterprise plan, which also requires an active SAML SSO configuration before it can be enabled.
Without SCIM, every onboarding and offboarding action is manual. Users provisioned via SCIM still require a follow-up step: a Technical Administrator must manually assign a role and license after provisioning, or the user lands in Gong with no access.
There is no native unused-seat report; identifying inactive users requires manually filtering the Users list by last-active date.
What IT admins are saying
Recurring friction points reported by Gong admins center on the two-step SCIM onboarding gap (provisioned users arrive with no access until a role is manually assigned), and the absence of automated SCIM token rotation - an expired token causes silent provisioning outages.
Org hierarchy cleanup after deactivation is fully manual; deactivating a user does not reassign their direct reports.
Contract rigidity is a consistent complaint: seat counts locked at signing, no mid-term reduction, and early termination penalties reported at 50–100% of remaining contract value. Viewer/non-recording seat types are not universally included and must be negotiated at purchase.
Common complaints:
- Users provisioned via SCIM receive no Gong access by default and require a manual role assignment step after provisioning, creating a two-step onboarding process.
- SCIM token management requires manual rotation; there is no automated token refresh, which can cause provisioning outages if tokens expire unnoticed.
- Enterprise pricing is not publicly listed; total cost of ownership is difficult to estimate without a sales engagement due to the three-part fee structure.
- Deactivating a user does not automatically reassign their direct reports, requiring manual org hierarchy cleanup.
- No native 'unused seat' report; identifying inactive users requires manual filtering by last-active date.
- Seat counts are locked at contract signing; reducing headcount mid-term does not reduce billing until renewal.
- There are no custom roles; the fixed role set (Admin, Manager, Rep) does not accommodate nuanced permission requirements for some organizations.
The decision
Gong is well-suited for large, stable sales teams where headcount changes are infrequent and the contract economics are justified by call intelligence value. The all-or-nothing Technical Administrator role and the absence of granular permission controls make it a poor fit for organizations that need delegated or scoped admin access.
Teams that need automated, zero-touch lifecycle management across every app in their stack should confirm Enterprise plan availability and SSO readiness before committing, since SCIM requires both. The manual role-assignment step post-SCIM-provisioning is a process gap that must be accounted for in any onboarding workflow.
Bottom line
Gong delivers strong call intelligence for large sales teams but imposes meaningful administrative overhead: a fixed role model with no partial admin options, a mandatory manual step after SCIM provisioning, no permanent user deletion, and contract terms that lock seat counts regardless of headcount changes.
Organizations that prioritize automated, auditable user lifecycle management across every app should validate Enterprise plan access, SSO readiness, and the post-provisioning role-assignment gap before deployment.
Automate Gong workflows without one-off scripts
Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.