A quick reference for who can do what in the Admin Center. It covers the two customer-side administrator roles and the standard user. For the concepts behind roles and scope, see Access Roles.
The roles at a glance
| Role |
Manages |
Scope |
| Standard User |
Their own access — signs in and uses the applications they are licensed for |
Themselves |
| Application Administrator |
An application's user access and licence assignment |
Your organisation · specific application(s) |
| Organisation Administrator |
The whole organisation — users, groups, identity providers, IP access, licences and access grants |
Your organisation · all applications |
Permissions matrix
Legend: ✔ can do · ✔ (own app) limited to the application(s) they administer · — cannot do.
Sign-in and profile
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| Sign in to applications they are licensed for |
✔ |
✔ |
✔ |
| Manage their own profile |
✔ |
✔ |
✔ |
Users
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| Create or invite users |
— |
✔ |
✔ |
| Edit a user's details |
— |
✔ |
✔ |
| Bulk import users (CSV) |
— |
✔ |
✔ |
| Manage a user's local login |
— |
✔ |
✔ |
| Delete users |
— |
— |
✔ |
Groups
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| Create, edit or delete groups |
— |
— |
✔ |
| Assign an application's roles and licences through groups |
— |
✔ (own app) |
✔ |
Licences
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| View licence allocation and usage |
— |
✔ (own app) |
✔ |
| Assign or revoke licences to users and groups |
— |
✔ (own app) |
✔ |
Identity providers and IP access
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| Configure identity providers (add, edit, delete, enable per application) |
— |
— |
✔ |
| Manage IP access control lists |
— |
— |
✔ |
Applications
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| View and open applications |
✔ |
✔ |
✔ |
| Request a trial for an application |
— |
✔ |
✔ |
Access delegation
| Action |
Standard User |
Application Administrator |
Organisation Administrator |
| Grant or revoke the Organisation Administrator and Application Administrator roles (Access Matrix) |
— |
— |
✔ |
Handled by Discngine
Some actions are performed by Discngine, not by any customer-side role. To request them, contact Discngine Support:
- Activate or deactivate an application
- Provision a new environment
- Size or change your organisation's licence pool (type, quantity, expiry)
Related