Skip to main content

Roles and Permissions

Valerie
  • Updated

Automox supports six role-based access controls (RBAC). The user roles and permissions are described here:

Note:

  • Global Administrators have complete control of the Automox account. Zone Administrators only have control of the zone they are assigned to. You can also assign a zone administrator access to the Global View, in which the permissions for the account management are excluded.

  • It is recommended to keep the number of Global Administrators to a minimum.

  • Only Global Administrators can invite users to an account.

Permissions

Zone Administrator

Zone Operator

Patch Operator

Billing Administrator

Read Only

Billing

 

 

 

 

 

  • Modify

X

 

 

X

 

  • Read

X

 

 

X

X

Devices

 

 

 

 

 

  • Add

X

X

 

 

 

  • Delete

X

X

 

 

 

  • Manage

X

X

 

 

 

  • Read

X

X

X

X

X

  • Control

X

X

Groups

 

 

 

 

 

  • Create

X

X

 

 

 

  • Delete

X

X

 

 

 

  • Modify

X

X

X

 

 

  • Read

X

X

X

X

X

Package (Software)

 

 

 

 

 

  • Manage (Patch/Update)

X

X

 

 

 

  • Read

X

X

X

X

X

Patch Policy

 

 

 

 

 

  • Create

X

X

X

 

 

  • Delete

X

X

X

 

 

  • Modify

X

X

X

 

 

  • Execute

X

X

X

 

 

  • Read

X

X

X

X

X

  • Approve

X

X

 

 

 

RBAC Roles

 

 

 

 

 

  • Create

X

 

 

 

 

  • Delete

X

 

 

 

 

  • Modify

X

 

 

 

 

  • Read

X

X

X

X

X

Reports

 

 

 

 

 

  • Read

X

X

X

X

X

Required Software Policy

 

 

 

 

 

  • Create

X

X

 

 

 

  • Delete

X

X

 

 

 

  • Modify

X

X

 

 

 

  • Execute

X

X

X

 

 

  • Read

X

X

X

X

X

SAML

 

 

 

 

 

  • Read

X

X

X

X

X

  • Manage

X

 

 

 

 

  • Delete

X

 

 

 

 

Software

 

 

 

 

 

  • Read

X

X

X

X

X

TFA (two-factor authentication)

 

 

 

 

 

  • Create

X

 

 

 

 

  • Read

X

 

 

 

X

  • Manage

X

 

 

 

 

  • Delete

X

 

 

 

 

Users Preferences

 

 

 

 

 

  • Read

X

 

 

X

X

  • Modify

 

 

 

 

 

Users

 

 

 

 

 

  • Invite

X

 

 

 

 

  • Delete

X

 

 

 

 

  • Modify

X

 

 

 

 

  • Read

X

 

 

X

X

Worklets

 

 

 

 

 

  • Create

X

X

 

 

 

  • Delete

X

X

 

 

 

  • Modify

X

X

 

 

 

  • Execute

X

X

X

 

 

  • Read

X

X

X

X

X

Zone

 

 

 

 

 

  • Manage

X

 

 

 

 

  • Create

X

 

 

 

 

  • Read

X

X

X

X

X

Zone Preferences

 

 

 

 

 

  • Create

X

 

 

 

 

  • Read

X

X

 

X

X

Role Summaries

Zone Administrator: Provides full administrative rights to a specific zone. For zones with a Complete plan, this role can access devices with remote control.

Zone Operator: A zone operator (formerly patch administrator) can create, read, modify, and delete all policies and server groups for a zone(s). They can add, remove, and reboot devices. For zones with a Complete plan, this role can access devices with remote control.

Patch Operator: A patch operator can create, modify, and delete patch policies. They can view and run worklets and required software policies. They do not have permission to create or modify worklets and required software policies. They can add, remove, and reboot devices.

Billing Administrator: Provides full read rights in addition to the ability to view and edit billing information.

Read Only: Provides full read rights to a specific zone.

User preferences, such as notifications and password, can only be modified by the user.

Related articles

Comments

0 comments

Article is closed for comments.