Roles and permissions

A role is a named set of permissions that decides what a user can see and do in Cyber Console. Use roles to give each user the access that their work needs.

In Cyber Console, the roles are on the Roles and permissions screen, under Settings > General settings > Roles and permissions. Only a company administrator manages roles. You cannot delegate role management to another role. To let a user maintain role definitions, make that user a company administrator.

Built-in and custom roles

Roles are of two kinds:

• Built-in roles come with the platform, and each one belongs to a service, such as Management or PSA.
• Custom roles are roles that you create. You choose which permissions a custom role grants.

Permissions

A permission is a single authorization, such as the permission to clear backup alerts. Permissions are grouped by service, such as Cyber Protection or Management Portal, and then by category, such as Alerts. A tag shows the feature that a permission belongs to, such as BACKUP or SECURITY.

Role list

The role list shows the roles that are available to a tenant. The tenant selector at the top of the list sets the tenant whose roles the list shows, and the text Roles available to "<tenant>" only. below the page title names it. The tenant that you select also owns the custom role that you create.

Cards above the list show the number of roles in each group: Owned by this tenant, Built-in, Custom, Propagated, Inherited, and Total number. A card also filters the list.

Each row of the list is one role, with the following columns:

• Name – the name of the role.
• Type – the badges that show the kind of the role, as described in the next section.
• Description – the description of the role.

The row menu at the end of a row has the actions for the role. A custom role has View, Edit, Clone, and Delete. A built-in role has only View.

Role types and badges

The badges in the Type column show the kind of each role:

• Built-in and the name of a service, such as Management or PSA – a role that comes with the platform. The second badge shows the service that the role belongs to.
• Custom – a custom role that your tenant owns and that is available to your tenant only.
• Custom and Propagated – a custom role that your tenant owns and made available to its child tenants.
• Custom and Inherited – a custom role that a parent tenant owns and made available to your tenant. Your tenant uses the role, and the parent tenant manages it.

Role propagation

Propagation decides whether a custom role is available to the child tenants of the tenant that owns the role, or to the owner tenant only. A role has one of two propagation settings:

• All Sub-tenants – the role is available to all child tenants below the owner. This is the default.
• Owner Only – the role is available only at the owner tenant.

While users hold a role, you cannot disable its propagation. You can delete a role that has no assigned users, and you can disable its propagation.