Roles and Permissions

Prev Next

A quick reference for who can do what in the Admin Center. It covers the two customer-side administrator roles and the standard user. For the concepts behind roles and scope, see Access Roles.

The roles at a glance

Role Manages Scope
Standard User Their own access — signs in and uses the applications they are licensed for Themselves
Application Administrator An application's user access and licence assignment Your organisation · specific application(s)
Organisation Administrator The whole organisation — users, groups, identity providers, IP access, licences and access grants Your organisation · all applications

Permissions matrix

Legend: ✔ can do · ✔ (own app) limited to the application(s) they administer · — cannot do.

Sign-in and profile

Action Standard User Application Administrator Organisation Administrator
Sign in to applications they are licensed for ✔ ✔ ✔
Manage their own profile ✔ ✔ ✔

Users

Action Standard User Application Administrator Organisation Administrator
Create or invite users — ✔ ✔
Edit a user's details — ✔ ✔
Bulk import users (CSV) — ✔ ✔
Manage a user's local login — ✔ ✔
Delete users — ✔ ✔

Groups

Action Standard User Application Administrator Organisation Administrator
Create or edit groups — ✔ (own app) ✔
Delete groups — — ✔
Assign an application's roles and licences through groups — ✔ (own app) ✔

Licences

Action Standard User Application Administrator Organisation Administrator
View licence allocation and usage — ✔ (own app) ✔
Assign or revoke licences to users and groups — ✔ (own app) ✔

Identity providers and IP access

Action Standard User Application Administrator Organisation Administrator
Configure identity providers (add, edit, delete, enable per application) — — ✔
Manage IP access control lists — — ✔

Applications

Action Standard User Application Administrator Organisation Administrator
View and open applications ✔ ✔ ✔
Request a trial for an application — ✔ ✔

Access delegation

Action Standard User Application Administrator Organisation Administrator
Grant or revoke the Organisation Administrator and Application Administrator roles (Users → Edit) — — ✔

Handled by Discngine

Some actions are performed by Discngine, not by any customer-side role. To request them, contact Discngine Support:

  • Activate or deactivate an application
  • Provision a new environment
  • Size or change your organisation's licence pool (type, quantity, expiry)

Related