How do I assign QA Admin scope?

Who can do this

Platform Admin only

QA Admins are doubly scoped — a customer scope and an instance scope. They can only operate where both scopes intersect.

At invite time

The scope pickers appear when you tick QA Admin on the invite form. You must grant at least one customer and at least one instance.

On an existing user

1. Open Internal Users and click the user.
2. Make sure they have the QA Admin role checked.
3. Customer Scope — click Grant Customer and pick customers.
4. Instance Scope — click Grant Instance and pick instances.
5. Revoke with the X on any granted chip.

Result

When the QA Admin runs an action — start a migration, create a tenant, open an instance — it succeeds only if the target falls within both scopes. The Console hides options outside scope so the UI doesn't tempt them with disabled actions.

Typical setup

QA Admins are scoped to QA / sandbox customers and non-prod instances so they can run validation flows without ever touching prod data.

Related

• How do I assign Account Manager scope?
• How do I create an internal user?