Roles

Roles allow you to segment access to organization information or the different platform features based on the user who has signed in and the role they have applied. Within the same role, you can assign different permission levels for different organizations.

Create a new role

To create a new role, click the New button. A form will open requesting a name for the new role. Once assigned, it will appear in the roles table.

Multi-tenant environments

An organization’s roles let you configure access and visibility for the organization’s users, and they also allow you to include permissions to configure access and visibility for dependent organizations. An organization is dependent when:

It is a customer-type organization and the roles and users are in the higher-level partner-type organization.
It is a sub-organization of a customer organization.

Roles are assigned to users and contain the definition of access and visibility levels, allowing you to set different configurations within the same role for the root organization and its sub-organizations. This can only be done in a top-down manner; that is, from a higher-level organization, permissions can be assigned to that organization itself and to the organizations that depend on it.

Table information

The roles table shows the following information:

Name. Name assigned to the role.
Assigned users. Users to whom that role is assigned.
Assigned tenants. Tenants to which that role is assigned.
Created by. User who created the role.
Updated by. User who updated the role’s information.
Created on. Role creation date.
Updated on. Role update date.
Action.: Provides access to View details and to Permissions.

If you click the arrow located to the left of the role name, a sub-table will be displayed from where you can access direct information about the permissions assigned to that role, as well as the tenants to which that permission has been assigned.

Details view

When you click on an item in the roles table, you go to the details view, which shows the following tabs:

Details
Permissions
Users
API keys

Details

This tab holds additional information about the role: name, number of users and tenants to whom that role has been assigned, creation and update dates, and the user who created it. At the bottom right, the Clone button allows you to copy and reuse the role. Edit provides the option to change the role’s name.

Permissions

Through Permissions you can view, create, or edit permissions. In this view, you can configure a single group of permissions for each selectable organization. New lets you create a new permission with the following information:

All tenants
Tenant
Permissions
All reporting groups
Reporting groups

All tenants

Lets you apply the permissions to all organizations you have access to. In service provider use cases, it allows you to manage permissions centrally and replicate the changes to the managed customer organizations. When a role’s permissions mix permissions applied at the “All tenants” level with organization-specific configurations, which may be different, the more specific permission wins. This way you can create a default configuration for all organizations and override those that require modifications.

Tenant

Lets you specify the organization to which permissions are being granted in the role being edited; the All tenants option lets you configure the role’s permissions to apply to all organizations you have access to.

Permissions

Lets you select the access level the role will have.

All reporting groups

Lets you apply the permissions to all reporting groups you have access to. In service provider use cases, it allows you to manage permissions centrally and replicate the changes to the managed customer organizations.

Reporting groups

Lets you apply the permissions to the specified reporting groups; there can be more than one.

Users

This table lets you view the users who have the role assigned, and provides the option to perform searches.

API keys

Shows a table with the list of API keys created for that role. The fields contain the following information:

Name. Name assigned to the API key.
Status. Can be Active, Expired, or Revoked.
Key ID. ID corresponding to the API key.
Creation date. Date and time the key was created.
Expiration date. Date and time the key expires.
Revocation date. If it has been revoked, revocation date and time.

List of roles

The platform distinguishes the following roles:

Abbreviation	Role
Org Admin	Organization administrator
Org Admin RO	Read-only Organization administrator
User	User
L1	Support team
L1 RO	Read-only L1 support team
L2	L2 support team
L2 RO	Read-only L2 support team
L3	L3 engineering team
L3 RO	Read-only L3 engineering team
Billing	Billing

Permission tables by role

Roles let you group different access levels. The detail of the visibility and actions available for each role is defined in the following table:

Home

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅

Operations

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	⭐	✅	✅	✅	✅	✅	✅	❌

Audit logs

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	✅	✅	✅	✅	✅	✅	✅	✅

Flows

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	⭐	❌	❌	❌	❌	✅	✅	❌
Create	✅	❌	⭐⭐	❌	❌	❌	❌	✅	❌	❌
Modify	✅	❌	⭐⭐	❌	❌	❌	❌	✅	❌	❌
Delete	✅	❌	⭐⭐	❌	❌	❌	❌	✅	❌	❌

Reports

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
List	Read	✅	✅	❌	✅	✅	✅	✅	✅	✅	❌
Details	Read	✅	✅	❌	✅	✅	✅	✅	✅	✅	❌
	Create	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌
	Delete	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌
Settings	Modify	✅	❌	❌	❌	❌	❌	❌	✅	❌	❌
Create with AI	Read	✅	❌	✅	✅	✅	✅	✅	✅	✅	❌
	Create	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌
	Modify	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌
	Delete	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌

Tenants

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
	Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	✅
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Activation	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	✅

Monitor

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Active alerts	Read	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌
Alert settings	Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Read	✅	✅	✅	❌	❌	❌	❌	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Workspaces

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
	Read	✅	✅	⭐	✅	✅	✅	✅	✅	✅	❌
	Modify	✅	❌	✅	✅	❌	✅	❌	✅	❌	❌
	Delete	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
Workspace groups	Read	✅	✅	⭐	✅	✅	✅	✅	✅	✅	❌
	Create	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
	Modify	✅	❌	❌	✅	❌	✅	❌	✅	❌	❌
	Delete	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌

Updates

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	⭐	❌	❌	❌	❌	✅	✅	❌
Create	✅	❌	⭐⭐	❌	❌	❌	❌	❌	❌	❌
Modify	✅	❌	⭐⭐	❌	❌	❌	❌	❌	❌	❌
Delete	✅	❌	⭐⭐	❌	❌	❌	❌	❌	❌	❌

Analyzer

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Installed applications	Read	✅	✅	✅	❌	❌	✅	✅	✅	✅	❌
	Modify	✅	❌	✅	❌	❌	✅	❌	✅	❌	❌
Licenses	Read	✅	✅	❌	❌	❌	✅	✅	✅	✅	❌
	Create	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
	Modify	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
	Delete	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
SAM	Read	✅	✅	❌	❌	❌	✅	✅	✅	✅	❌

Microservices

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
	Create	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
	Read	✅	✅	✅	❌	❌	✅	✅	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
Enabled	Read	✅	✅	✅	❌	❌	✅	✅	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌

Billing

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	❌	❌	❌	❌	❌	❌	❌	✅
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	✅

Product

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
Report	Read	✅	✅	✅	❌	❌	❌	❌	✅	✅	❌
Environment	Read	✅	✅	✅	❌	❌	❌	❌	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Baseline	Read	✅	✅	✅	❌	❌	❌	❌	✅	✅	❌
FlexxAgent settings	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Integrations

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Webhooks

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Modules

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Information

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Read	✅	✅	✅	❌	❌	✅	✅	✅	✅	✅
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Policies

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	✅	❌	❌	❌	❌	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

API keys

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Reporting groups

Feature	Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
	Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
FlexxAgent settings	Read	✅	✅	❌	❌	❌	❌	❌	❌	❌	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Automatic update	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
FlexxAgent version	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Magic link	Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
	Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
	Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	✅	✅	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

Users

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	✅	✅	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

DaaS

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Create	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Read	✅	✅	❌	❌	❌	❌	❌	✅	✅	❌
Modify	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌
Delete	✅	❌	❌	❌	❌	❌	❌	❌	❌	❌

✅ Has access.
⭐ Has access if they additionally have L1 in Workspaces.
⭐⭐ Has access if they additionally have L2 in Workspaces.
❌ Does not have access.

Permission tables for microservices

The user’s role corresponds to the organization where the microservice was created.

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Clone / create	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
View	✅	✅	🔑	❌	❌	✅	✅	✅	✅	❌
Edit	✅	❌	💡	❌	❌	✅	❌	✅	❌	❌
Change to public or private	❌	❌	❌	❌	❌	❌	❌	❌	❌	❌
Edit visibility when private	✅	❌	💡	❌	❌	✅	❌	✅	❌	❌

✅ Has access.
🔑 Has access if they additionally have read-only L1 in Workspaces.
💡 Has access if they are the author of the microservice.
❌ Does not have access.

Enabled microservices

The user’s role corresponds to the organization where the microservice was enabled.

Action	Org Admin	Org Admin RO	User	L1	L1 RO	L2	L2 RO	L3	L3 RO	Billing
Enable	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
Disable	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌
Edit	✅	❌	❌	❌	❌	✅	❌	✅	❌	❌

✅ Has access.
❌ Does not have access.

​Create a new role

​Multi-tenant environments

​Table information

​Details view

​Details

​Permissions

​All tenants

​Tenant

​Permissions

​All reporting groups

​Reporting groups

​Users

​API keys

​List of roles

​Permission tables by role

​Home

​Operations

​Audit logs

​Flows

​Reports

​Tenants

​Monitor

​Workspaces

​Updates

​Analyzer

​Microservices

​Billing

​Product

​Integrations

​Webhooks

​Modules

​Information

​Policies

​API keys

​Reporting groups

​Roles

​Users

​DaaS

​Permission tables for microservices

​Enabled microservices

Create a new role

Multi-tenant environments

Table information

Details view

Details

Permissions

All tenants

Tenant

Permissions

All reporting groups

Reporting groups

Users

API keys

List of roles

Permission tables by role

Home

Operations

Audit logs

Flows

Reports

Tenants

Monitor

Workspaces

Updates

Analyzer

Microservices

Billing

Product

Integrations

Webhooks

Modules

Information

Policies

API keys

Reporting groups

Roles

Users

DaaS

Permission tables for microservices

Enabled microservices