Cymmetri Identity platform has six different admin roles with various levels of access to the various menus and resources on the administration portal of the Cymmetri deployment.
The various admin roles on the Cymmetri Identity Platform may be described as follows -
This is the so-called “super admin” administrator role in the Cymmetri Identity platform deployment. The administrators having this role have the authorization to change any settings or making any changes to the tenant.
This is slightly less privileged administrator. Most tenant-wide system settings, such as the configuration of the SMS, Email providers (where such configurations are made by the tenant), are restricted for the domain administrators, all other configurations may be viewed and edited by admins with the Domain administrator role.
An administrator with a role of Application Administrator has access to the Identity hub configurations, including application, user, and group configurations. The application administrator may map users and groups to applications, and are able to edit all configurations related to Application Management.
An administrator with a role of Report administrator has the access to the reports menu, including viewing, modifying and adding new reports.
Helpdesk administrator has access to a very limited set of administrative functionalities, such as, reset password of end-user, remove configured Multifactor authentication options, and other such common use-case
All administrative users have read only access to the administrative section of the Cymmetri Identity platform tenant, but the admins with the role “Read Only Administrator” do not have any edit access to any of the settings or configurations, and only have “Read Only” access to the administrative section.
Click on the Configuration menu on the right-hand side menu
Now click on the Admins sub menu within the Configuration menu
Search for the user to assign an administrator role to them and click on the assign button
Select the chosen administration role and click on save
Administrator has been assigned the role as “Report Administrator”.
Click on the +Add new button to add a new administrator