An authorized administrator, called an agreement manager, can create, edit, and delete agreements through the Agreements page as long as he or she has the appropriate permissions. The agreement manager is configured in the AgreementManagersGroup element of the security labels configuration file. There can be as few as one agreement manager, in which case the groupUfid element would be populated with the identifier for a single user, or the element could be populated with an identifier for a group, allowing multiple agreement managers. In the sample configuration, there is a group called Agreement Managers.

Only members of the agreement managers group are able to see the Agreements page. Other users may have read access for agreements, but only agreement managers with the appropriate permissions are able to perform actions other than View Information, Subscribe, or Edit Access Control. For more information about access control and the agreement managers group, see Setting Access Control Permissions for Agreement Managers.