Skip to content
Snippets Groups Projects
Unverified Commit 16c49569 authored by marciocloudflare's avatar marciocloudflare Committed by GitHub
Browse files

[Area 1] New admin roles (#5689)

* changed from admin to super admin

* changed from read-only to viewer
changed from read-write to soc analyst
changed permissions table

* refined text

* completed config name
added desc

* refined descriptions

* refined text
parent 86447a0c
No related branches found
No related tags found
No related merge requests found
......@@ -6,7 +6,7 @@ weight: 1
# Manage account members
If your account is an **Admin**, you have the ability to add, edit, and delete users and - if those users lose their two-factor authentication (2FA) device - reset their 2FA.
If your account is a **Super Admin**, you have the ability to add, edit, and delete users and - if those users lose their two-factor authentication (2FA) device - reset their 2FA.
## Add user
......
......@@ -19,6 +19,6 @@ To update parent permissions:
- **No external account access**: Shuts off all access from the parent account (including Area 1).
- **Allow external account view-only access** (default): Allows a parent user to view the customer's portal, including settings.
- **Allow external account admin access**: Allows a parent user to administer the customer account on their behalf. By selecting this option the customer is acknowledging consent for outside administration of their account.
- **Allow external account Super Admin access**: Allows a parent user to administer the customer account on their behalf. By selecting this option the customer is acknowledging consent for outside administration of their account.
5. Select **Save**.
\ No newline at end of file
......@@ -16,8 +16,8 @@ These accounts are only required for administrators who manage multiple accounts
Parent users can have one of the following roles:
- **Read-only**: Can enter child accounts but is prevented from making any settings changes, regardless of the customer account settings.
- **Read-write**: Can enter child accounts and make changes on behalf of the customer.
- **Viewer**: Can enter child accounts but is prevented from making any settings changes, regardless of the customer account settings.
- **SOC Analyst**: Can enter child accounts and make changes on behalf of the customer.
If your account has [parent permissions](/email-security/account-setup/manage-parent-permissions/) that conflict with a parent user's permissions, the parent permissions set on your account take precedence.
......@@ -29,25 +29,32 @@ Child accounts control settings and services associated with an Area 1 instance.
Users created at child level will only have access to the assigned child account. These users can have one of the following roles:
- **Read-only**: Only have access to view the email and detection statistics. No access to **Settings** (the gear icon).
- **Read-write**: Can view email and detection statistics, as well as message preview, retraction, detection search, and mail trace. No access to **Settings** (the gear icon).
- **Admin**: Can make any configuration changes for the account. Can access **Settings** (the gear icon).
| Account area | Read-only | Read-write | Admin |
| --- | --- | --- | --- |
| All Settings | ❌ | ❌ | ✅ |
| User Profile | ✅ | ✅ | ✅ |
| Global Search | ✅ | ✅ | ✅ |
| Detection Search | ❌ | ✅ | ✅ |
| Mail Trace | ❌ | ✅ | ✅ |
| Home | ✅ | ✅ | ✅ |
| Email | ✅ | ✅ | ✅ |
| Web | ✅ | ✅ | ✅ |
| Accountability | ✅ | ✅ | ✅ |
| Announcements and Support | ✅ | ✅ | ✅ |
| Landscape | ✅ | ✅ | ✅ |
| Message Preview | ❌ | ✅ | ✅ |
| Message Retraction | ❌ | ✅ | ✅ |
- **Super Admin**: Has full access to the account and can make any configuration changes. Can access **Settings** (the gear icon).
- **Configuration Admin**: Can make configuration changes and manage users, except for Super Admin. Has no ability to review messages.
- **SOC Analyst**: Can search, review and retract messages. Has no admin capabilites or access to **Settings** (the gear icon).
- **Viewer**: Only has access to metrics withing the system. No access to **Settings** (the gear icon).
{{<table-wrap>}}
Account area | Super Admin | Configuration Admin | SOC Analyst | Viewer
--- | --- | --- | --- | ---
All Settings | ✅ | ✅ | ❌ | ❌
User Profile | ✅ | ✅ | ✅ | ✅
Global Search | ✅ | ✅ | ✅ | ✅
Detection Search | ✅ | ✅ | ✅ | ✅
Detection Search Actions | ✅ | ✅ | ✅ | ❌
Mail Trace | ✅ | ✅ | ✅ | ❌
Home | ✅ | ✅ | ✅ | ✅
Email | ✅ | ✅ | ✅ | ✅
Web | ✅ | ✅ | ✅ | ✅
Accountability | ✅ | ✅ | ✅ | ✅
Announcements and Support | ✅ | ✅ | ✅ | ✅
Landscape | ✅ | ✅ | ✅ | ✅
Message Preview | ✅ | ❌ | ✅ | ❌
Message Retraction | ✅ | ❌ | ✅ | ❌
Admin Quarantine | ✅ | ❌ | ✅ | ❌
{{</table-wrap>}}
### Parent users
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment