Administrator permissions
Each role contains multiple permissions that are turned on. The roles make sure that administrators who do not have specific administrative permissions cannot escalate their permissions. For example, junior helpdesk administrators cannot escalate their roles to senior helpdesk administrator roles.
|
Permission |
Security role |
Enterprise role |
Senior Helpdesk role |
Junior Helpdesk role |
|---|---|---|---|---|
|
Create a group |
√ |
√ |
√ |
|
|
Delete a group |
√ |
√ |
||
|
View a group |
√ |
√ |
√ |
√ |
|
Edit a group |
√ |
√ |
√ |
|
|
Add user to a group |
√ |
√ |
√ |
|
|
Create a user |
√ |
√ |
√ |
|
|
Delete a user |
√ |
√ |
√ |
|
|
View a user |
√ |
√ |
√ |
√ |
|
Edit a user |
√ |
√ |
√ |
√ |
|
Assign an administrative role |
√ |
|||
|
View a device |
√ |
√ |
√ |
√ |
|
Edit a device |
√ |
√ |
√ |
√ |
| Specify device ownership |
√ |
√ |
√ |
√ |
|
Specify an activation password |
√ |
√ |
√ |
√ |
|
Generate an activation email |
√ |
√ |
√ |
√ |
|
View device activation settings |
√ |
√ |
√ |
√ |
|
Edit device activation settings |
√ |
√ |
√ |
√ |
|
Create an IT policy |
√ |
√ |
||
|
Delete an IT policy |
√ |
√ |
||
|
View an IT policy |
√ |
√ |
√ |
√ |
|
Edit an IT policy |
√ |
√ |
||
| Assign an IT policy or a profile to a user |
√ |
√ |
√ |
|
|
Create a software configuration |
√ |
√ |
||
|
View a software configuration |
√ |
√ |
√ |
√ |
|
Edit a software configuration |
√ |
√ |
||
|
Delete a software configuration |
√ |
√ |
||
|
Create an application definition |
√ |
√ |
||
|
View an application |
√ |
√ |
√ |
√ |
|
Edit an application |
√ |
√ |
||
|
Delete an application |
√ |
√ |
||
| Assign a software configuration to a user |
√ |
√ |
√ |
|
|
Delete all device data and remove device |
√ |
√ |
√ |
√ |
|
Delete only the organization data and remove device |
√ |
√ |
√ |
√ |