×
×
×
×
Focus Mode
Share
Theme Switcher
Share

Understanding User Roles in Endpoint Central

Last Updated On: 01 Oct 2026|
8 minutes read |

This document will explain the User Roles and permissions which can be mapped for users. Creating various users with only certain roles and permissions allow you to have a more robust control over who does what with the product. For a detailed understanding about the various user roles and the associated scope offered by the product, refer to the doc on Role differences

To create a new user, navigate to Admin -> General Settings -> User Administration -> Add User

Understanding user roles

To create a new role, navigate to Admin -> General Settings -> User Administration -> Add Role

Understanding user roles
User RoleConfigurationsPatch ManagementVulnerability ManagementSoftware DeploymentInventoryToolsRemote Desktop SharingReportMDM Control ModulesOS ImagingOS DeploymentSensorsEndpoint AnalyticsWorkflowQuery ReportsScope Of Management
AdministratorFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull Control
AuditorNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessRead AccessRead Access to Reports No AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo Access
GuestRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessRead AccessNo AccessNo Access
IT Asset ManagerNo AccessNo AccessNo AccessNo AccessFull ControlNo AccessNo Access No AccessFull Control over InventoryNo AccessNo AccessRead AccessRead AccessRead AccessNo AccessNo Access
Endpoint CentralFull ControlFull ControlNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessFull ControlFull ControlNo AccessNo AccessNo AccessNo AccessNo Access
Patch ManagerNo AccessFull ControlNo AccessFull ControlNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo Access
Remote Desktop ViewerNo AccessNo AccessNo AccessNo AccessNo AccessFull ControlNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo Access
TechnicianFull ControlRead AccessNo AccessFull ControlNo AccessFull ControlNo AccessNo AccessNo AccessNo AccessWrite AccessWrite AccessWrite AccessNo AccessNo AccessNo Access
Vulnerability ManagerNo AccessNo AccessFull ControlNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo Access
Mobile Device ManagerFull ControlFull ControlNo AccessFull ControlFull ControlFull ControlNo AccessFull Control except Device EnrollmentNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo AccessNo Access
MDM ControlCreate Profile ManagementCreate App ManagementCreate InventoryCreate ReportEnrollmentContent ManagementOS Update ManagementRemote Control
Mobile Device ManagerFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull ControlFull Control

The following are the roles within the Endpoint Security.

RoleDescription
Application Control ManagerThis role provides the user with full control over application control and application control reports.
Bitlocker ManagerThis role provides the user with full control of BitLocker management and reports.
Browser Security ManagerThis role provides the user with full control of Browser Security functions.
Device Control ManagerThis role provides the user with full control of Device Control functions and reports.
Security ManagerThis role provides the user with full control of Security Manager functions such as BitLocker Management, Patch Management, Application Control and Vulnerability Management amongst others.
Note
Apart from these predefined roles, you can create multiple custom roles based on your organization's access requirements. You are not limited to one role of each type, multiple roles can be created to suit different access needs within your organization.
Was this article helpful?
Yes
No