Role Management

Back to Admin Console

Roles and Permissions help in organizing the developer community based on the scope of their work.

• By default the roles of Master Admin, App Owner, App Developer and App Tester are created by the system.
• Each role has set of permissions allowed.
• You can edit the permission settings for App Developer and App Tester but not for Master Admin and App Owner roles.
• Users can be assigned to these roles, except App Owner which gets assigned when a User creates an App.

Apart from these the role of Primary Master Admin is created and assigned to the creator of the account.

These roles can be classified into:

• Admin Roles which help in account management, and
• App Roles which help in app development.

Admin Roles

An admin role is a set of pre-defined permissions for managing the user community. In this section, we talk about Admin roles, the permissions associated with them, how to create and assign these admin roles to users.

Built-in Admin Role

By default, a Master Admin role is created and this role can be assigned to any user for admin access. The various permissions granted to the Master Admin role are listed below:

Permission	Master Admin
Invite	Yes
Import Users / Sync	Yes
Directory Sync	Edit
Manage Users	Edit
Manage User Settings	Edit
Manage Groups	Edit
Manage Custom Admin Roles	Yes
Manage Built-In Admin Roles	Yes
Manage App Roles	Yes
Manage Deployment	Yes
Enterprise Apps	Yes
Consumer Apps	Yes
Smart Apps	Yes
Preferences	Yes
Single Sign On	Yes
Kore.ai Connector	Yes
Enterprise Key	Yes
API Scopes	Yes
View and Run Audit Reports	Yes
View and Run App Chat History	Yes

Custom Admin Role

The Master Admin can create custom Admin roles and assign the same to users. The following permissions can be granted to an Admin role.

Permission	Access Levels	Description
Invite	Yes, No	Invite Users via email; Invite users already imported
Import Users / Sync	Yes, No	Bulk Import users via files
Directory Sync	Yes, No	Enroll users via Directory Sync
Manage Users	Yes, No	Manage user profile, user status, and role assignments
Manage Groups	Yes, No	Create a local group; manage user membership, view distribution lists (DLs)
Manage Custom Admin Roles	Yes, No	Set up and manage Custom Admin Roles. Assign/Revoke users
Manage Built-In Admin Roles	Yes, No	Assign users to / revoke users from built-in admin roles
Manage App Roles	Yes, No	Set up and manage app roles. assign/revoke users
Manage Deployment	Yes, No	Approve & publish app (tasks) deployment requests
Enterprise Apps	Yes, No	Assign approved Enterprise app tasks to managed users
Consumer Apps	Yes, No	Manage consumer apps, tasks, and channels
Smart Apps	Yes, No	Manage smart apps, tasks, and channels
Preferences	Yes, No	Manage auto deployments and assignments
Single Sign On	Yes, No	Configure and manage Single Sign On
Kore.ai Connector	Yes, No	Initiate, enable & disable Kore.ai connector
Enterprise Key	Yes, No	View key used for encrypting enterprise data
API Scopes	Yes, No	Setup API scopes to manage all users, roles, and in your account
View and Run Audit Reports	Yes, No	Access Audit Reports; Ability to run reports; filter criteria, etc
View and Run App Chat History	Yes, No	View chat history from all of your account

Creating an Admin role

3. On the upper-right corner of the Roles window, select +Add New.
4. Enter Role Name and Role Description.
5. Under Role Type, select Admin Role and select the necessary permissions for the role.
6. You can retain the default permission settings or modify them as per your requirements.
7. Select Save.

Once created, you can assign roles to individual users or to user groups. You can edit the roles from the Admin Console.

Assigning Admin role

1. Open the Admin Console, select User Management > Users.

2. Select a user’s record for which you want to add an app role. The user’s profile slides opens.

3. Under the Profile tab, edit Admin Role.

   1. Select the appropriate Admin role from the dropdown with the available roles.
   2. You can assign multiple admin roles to the selected user.
   

Assigning Admin Role to a User Group

1. Open the Admin Console, select User Management > Roles.
2. Locate the required role from the list, click the three-dot menu (⋮) at the right end of the row, and select Edit Role.
3. Select Assignments > Assign Role.
4. Open the Select Groups drop-down list and select all the groups for which you want to assign the app role, one after another.
5. You can assign users also from this dialog from the Select Users type ahead input box.
6. Select Save.

The default Master Admin role can be assigned to users (not groups) by the Primary Master Admin.

App Roles

This section illustrates various App Roles, their permissions, steps to create custom App role and assign users to the same.

App Roles can be used to define permissions for accessing various components of a bot. These permissions include the ability to create tasks, train the bot, enable channels, enable extensions via SDKs, publish the app and view usage analytics.

App Owner, App Developer, and App Tester are the three in-built app roles that are available for all accounts. Creators of are automatically assigned to the App Owner role.

You may create additional custom app roles to meet your specific requirements. You can assign app roles to app developers either from App Builder or from the Admin Console.

Following is the list of permissions that can be assigned to a App role:

Permission	Access Levels	Description
Tasks	Full, View, No	Ability to add, modify, upgrade and delete dialog, action, alert and info tasks.
Natural Language	Full, View, No	Ability to add, modify, and delete utterances, synonyms, patterns and standard responses. Ability to manage Default Dialog, Ignore Words, Field Memory, and Advanced Settings. Note: The Natural Language settings that can be modified from inside Dialog Tasks and App Analytics pages also adhere to these permissions.
Knowledge Graph	Full, View, No	Ability to add and modify Knowledge Collection
Batch Testing	Full, View, No	Ability to add and manage test suites. In ‘view’ mode, users can only review the results and not be able to run test suites
App Developers	Full, View, No	Ability to invite users to the app and assign them roles
App Settings	Full, View, No	Ability to manage General Settings, Language Management, Authorization Profiles, PII Settings, IVR Settings, App Variables, App Export, Advanced Settings, ChangeLogs, Delete App
App Import	Yes, No	Ability to upgrade a app by importing a new app definition file
Extensions	Yes, No	Ability to associate apps for BotKit, WebSDK, Agent Transfer, and Events. Note: App creation and management are allowed for all app developers. However, the association of app against an extension is controlled via this permission.
API Scopes	Yes, No	Ability to manage API Scopes
Publish App	Yes, No	Ability to publish app
Channels	Yes, No	Ability to enable and manage channel configurations
Dashboard	Yes, No	View dashboard data
App Analytics	Yes, No	View app analytics.

Built-in App Roles

The following App roles are created by default. These roles are applicable for standard apps, sample, and smart apps.

Permission	App Owner	App Developer	App Tester
Tasks	Edit	Edit	View
Natural Language	Edit	Edit	View
Knowledge Graph	Edit	Edit	View
Batch Testing	Edit	Edit	View
App Developers	Edit	View	View
App Settings	Edit	Edit	No Access
App Import	Yes	Yes	No
Extensions	Yes	Yes	No
API Scopes	Yes	Yes	No
Publish App	Yes	Yes	No
Channels	Yes	Yes	No
Dashboard	Yes	Yes	Yes
App Analytics	Yes	Yes	Yes

Custom App Roles

Admin can create custom App roles and set the App permissions to these roles.

Creating custom App role

3. On the upper-right corner of the Roles window, select +Add New.
4. Enter Role Name and Role Description.
5. Under Select Role Type, select App Role and select the necessary permissions for the role.

6. You can retain the default permission settings or modify them as per your requirements.
7. Select Save.

After creating a custom role, you can access more information about that role, change its name and description, add permissions to it, or assign this role to specific users.

Assigning App Role

You can assign roles to individual users or to user groups. You can add and edit the roles from the Admin Console. Also, you can assign an App role to a user while sharing the app with them from the Platform.

Assign App Role to a User from the Admin Console

1. 1. Open the Admin Console, select User Management > Users.
2. Select a user’s record for which you want to add an app role. The user’s profile slides opens.
3. Select Manage Product Access and do the following:
   1. From the first drop-down list select an App.
   2. From the second drop-down list, select the role you want to assign the user for the selected app.
4. Select Add +. The app name and app role appears below.