---
title: "Roles and Permissions"
slug: "roles-and-permissions"
updated: 2026-10-26T10:37:38Z
published: 2026-10-26T10:37:38Z
canonical: "docs.discngine.com/roles-and-permissions"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.discngine.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and Permissions

A quick reference for **who can do what** in the Admin Center. It covers the two customer-side administrator roles and the standard user. For the concepts behind roles and scope, see [Access Roles](/public/docs/access-roles).

## The roles at a glance

| Role | Manages | Scope |
| --- | --- | --- |
| **Standard User** | Their own access — signs in and uses the applications they are licensed for | Themselves |
| **Application Administrator** | An application's user access and licence assignment | Your organisation · specific application(s) |
| **Organisation Administrator** | The whole organisation — users, groups, identity providers, IP access, licences and access grants | Your organisation · all applications |

## Permissions matrix

Legend: **✔** can do · **✔ (own app)** limited to the application(s) they administer · **—** cannot do.

### Sign-in and profile

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| Sign in to applications they are licensed for | ✔ | ✔ | ✔ |
| Manage their own profile | ✔ | ✔ | ✔ |

### Users

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| Create or invite users | — | ✔ | ✔ |
| Edit a user's details | — | ✔ | ✔ |
| Bulk import users (CSV) | — | ✔ | ✔ |
| Manage a user's local login | — | ✔ | ✔ |
| Delete users | — | ✔ | ✔ |

### Groups

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| Create or edit groups | — | ✔ (own app) | ✔ |
| Delete groups | — | — | ✔ |
| Assign an application's roles and licences through groups | — | ✔ (own app) | ✔ |

### Licences

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| View licence allocation and usage | — | ✔ (own app) | ✔ |
| Assign or revoke licences to users and groups | — | ✔ (own app) | ✔ |

### Identity providers and IP access

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| Configure identity providers (add, edit, delete, enable per application) | — | — | ✔ |
| Manage IP access control lists | — | — | ✔ |

### Applications

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| View and open applications | ✔ | ✔ | ✔ |
| Request a trial for an application | — | ✔ | ✔ |

### Access delegation

| Action | Standard User | Application Administrator | Organisation Administrator |
| --- | --- | --- | --- |
| Grant or revoke the Organisation Administrator and Application Administrator roles (Users → Edit) | — | — | ✔ |

## Handled by Discngine

Some actions are performed by Discngine, not by any customer-side role. To request them, contact [Discngine Support](mailto:support@discngine.com):

- Activate or deactivate an application
- Provision a new environment
- Size or change your organisation's licence pool (type, quantity, expiry)

## Related

- [Access Roles](/public/docs/access-roles) — the roles, scope and how access is granted
- [Organisation Administrator Guide](/public/docs/organisation-administrator)
- [Application Administrator Guide](/public/docs/application-administrator)
- [How to Manage Licenses](/public/docs/how-to-manage-licenses)
- [How to Manage Groups](/public/docs/how-to-manage-groups)