Manage user roles

Related Video: Creating User Accounts

To assign a role to a user:

  1. Select the Users tab in top navigation.
  2. To assign roles to a new user:
    1. Click Create New User.
    2. Enter the new user's details into available fields.
  3. To assign roles to an existing user:
    1. Select a user from the list.
    2. In the right panel, click Edit User.
  4. Select the role or roles for the user.
  5. Click Create.

The Device User role is assigned by default, but it can be removed. However, to successfully enroll a device, an end user must be assigned the Device User role.

The following user roles are available:

Role Privileges
Device User
  • Can enroll their own device. Note: A user must be assigned the Device User role to successfully complete enrollment.
Device Admin
  • Can view, add, modify, and delete users.
  • Can view the roles that are assigned to device users.
  • Can assign/unassign the device user role.
  • Can view and send commands to all devices.
  • Can modify Android, Apple, and Windows enrollment settings
System Admin
  • Can view, add, modify, and delete users.
  • Can assign/unassign roles for device users, device admins, and system admins.
  • Can view and modify SSO configurations and SMA Integration settings.
  • Can map LDAP groups.

If user role assignment is set to Automatic during SSO Configuration, a manual attempt to update an individuals user's role via the Users > Edit User path may appear possible, but will be overwritten by the original SSO Configuration. To resolve, the configuration setting can be changed to Manual, which will then enable editing of individual user roles.

For the enrollment process to complete successfully, an end user must be assigned the Device User role. The Device User role can be assigned manually through the Users > Edit User path, or it can be assigned automatically through single sign-on (SSO) configuration. For more information, see

Configuring Single Sign-On.