Every user in your corp is assigned a role. Roles are groups of permissions that afford users the ability to view and control a variety of things in your corp.
- Owners have access to all corp features, can edit settings on every site, and can make changes to user accounts.
- Admins have limited access to corp features, access to specific sites and site-level settings, and can invite new users to specific sites.
- Users have access to specific sites and site-level settings.
- Observers have access to specific sites.
Corp management permission
The corp management permissions for each role are as follows:
| Permission | Owner | Admin | User | Observer |
|---|---|---|---|---|
| View corp-wide data and reports | Access | Limited access | Limited access | Limited access |
| Edit corp-wide security policies | Access | No access | No access | No access |
| Create or edit Corp Rules | Access | No access | No access | No access |
| View Corp Rules | Access | Access | Access | Access |
| Create or edit Corp Lists | Access | No access | No access | No access |
| Create or edit Corp Signals | Access | No access | No access | No access |
| View corp integrations | Access | Access | Access | Access |
| Edit corp integrations | Access | No access | No access | No access |
| View corp audit logs | Access | Access | Access | Access |
User management permissions
The user management permissions for each role are as follows:
| Permission | Owner | Admin | User | Observer |
|---|---|---|---|---|
| View users | All sites | Specific sites | Specific sites | Specific sites |
| Invite or remove other users | All sites | Specific sites | No sites | No sites |
| Allow users to create API Access Tokens | Access | No access | No access | No access |
Site management permissions
The site management permissions for each role are as follows:
| Permission | Owner | Admin | User | Observer |
|---|---|---|---|---|
| Create or delete sites | Access | No access | No access | No access |
| View site-level data and reports | All sites | Specific sites | Specific sites | Specific sites |
| Edit site blocking mode | All sites | Specific sites | Specific sites | No sites |
| Edit site IP anonymization policy | All sites | Specific sites | Specific sites | No sites |
| Edit site default blocking response code | All sites | Specific sites | Specific sites | No sites |
| View associated users | All sites | Specific sites | Specific sites | No sites |
| Edit site Display Name and Short Name | All sites | Specific sites | Specific sites | No sites |
Site configuration permissions
The site configuration permissions for each role are as follows:
| Permission | Owner | Admin | User | Observer |
|---|---|---|---|---|
| Change Blocking Mode | All sites | Specific sites | Specific sites | No sites |
| Create or edit rules | All sites | Specific sites | Specific sites | No sites |
| View rules | All sites | Specific sites | Specific sites | Specific sites |
| Create or edit signals | All sites | Specific sites | Specific sites | No sites |
| View signals | All sites | Specific sites | Specific sites | Specific sites |
| Create or edit lists | All sites | Specific sites | Specific sites | No sites |
| View lists | All sites | Specific sites | Specific sites | Specific sites |
| Create or edit redactions | All sites | Specific sites | Specific sites | No sites |
| View redactions | All sites | Specific sites | Specific sites | Specific sites |
| Create or edit integrations | All sites | Specific sites | Specific sites | No sites |
| View integrations | All sites | Specific sites | Specific sites | Specific sites |
| Create agent keys | All sites | Specific sites | Specific sites | No sites |
| View agent keys | All sites | Specific sites | Specific sites | No sites |
| View site audit logs | Access | Access | Access | Access |
Personal account management permissions
The personal account management permissions for each role are as follows:
| Permission | Owner | Admin | User | Observer |
|---|---|---|---|---|
| Edit account profile information | Access | Access | Access | Access |
| Create, edit, view support tickets | Access | Access | Access | Access |
| Create API Access Token | Limited access | Limited access | Limited access | Limited access |