Role Examples

This topic contains examples of how you would configure roles for some specific use cases.

Create a Read Only user who can receive emailed reports and alerts

When you select the Read Only role for a user, the Report Recipient role will also be selected by default. In order to create a read only user who can also receive emailed reports and alerts, simply accept these defaults. If you choose to de-select the Report Recipient role, your read only user will not show up in the list of available users to send a report to or in the list of users who can be subscribed to alerts.

Create a User Admin with Read Only access and who can create other Read Only users

Select User Admin as the highest access role for the user. Since you want this User Admin to only be able to create and manage users with Read Only access and below, you would de-select the “All privileges” option in the “Manage Users” box directly below the User Admin role. Then select the “Read Only” and “Report Recipient” options. Now this user will be able to create and manage users with Read Only and below permissions.

Create a User Admin who can only create other users

Create a User Admin for the sole purpose of creating or editing other users. This role cannot use the product to view data or receive reports and alerts.

Create a new user, then select the User Admin role for the user you are creating, and then de-select all of the roles that were automatically selected beneath User Admin. The User Admin you create is allowed to create other users with “All Privileges” unless you change the setting in the Manage Users box below the User Admin role.

If you would like this new User Admin to be able to create all roles except for Organization Admin and User Admin, select the ‘x’ remove “All Privileges.” Then, use the “Select Role Types” input to select each of the roles except for Organization Admin and User Admin.

Create a user who can change domain settings, but can not create or edit users

Select the Domain Policy Admin role for the user you are creating. All roles beneath Domain Policy Admin will be selected by default. If you do not want this user to be able to create or edit other users, de-select the User Admin role.