---
title: "Role Based Access to Scalefusion Dashboard"
slug: "role-based-access-to-scalefusion-dashboard"
description: "Explore how to set up role-based access control in the Scalefusion Dashboard. This guide covers how to create roles, assign permissions, and manage access for different team members."
updated: 2023-09-13T13:40:56Z
published: 2023-09-13T13:40:56Z
canonical: "help.scalefusion.com/role-based-access-to-scalefusion-dashboard"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Role Based Access to Scalefusion Dashboard

Scalefusion lets administrators designate roles for users. Each role carries a different set of permissions which are critical for secure usage of the product. Hence, on the Scalefusion Dashboard, we provide role-based access control to achieve this.

This document describes all such roles and permissions provided under each role, along with how they can be assigned to an administrator.

## How to Access

The Roles & Permissions can be accessed from the Admins and Roles section on the Dashboard. To access,

1. Click on your account profile in the upper right corner
2. Click on **Admins and Role****s**. This opens the Admins and Roles page.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/admins-and-roles.png)This page can also be reached by clicking on the **Admin and Roles** button from the **Account profile** page (accessed by clicking on View and Edit Profile). See the screenshot below.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T190231.732.png)
3. Navigate to the **Roles & Permissions** section![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T190255.795.png)

### Role Types/Categories

There are two categories of roles:

1. **System Roles:** Scalefusion has some pre-defined roles that come with a specific set of permissions for users, which they can assign while creating administrator(s).![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T190339.427.png)
2. **Custom Roles:** You can also create your own custom role, assign permissions as per the requirements of the defined role and assign it to administrators.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T190343.111.png)

They are described as under:

| Role Name | Description | Category | Sub Category |
| --- | --- | --- | --- |
| Group Admin | Has access to the devices and other features only for the device groups he/she is assigned | System Role | - Read Only* - Read and Write** |
| Device Admin | Has access to all the devices present in the account | System Role | - Read Only - Read and Write |
| Co-Account Manager | Has access to all features similar to the owner | System Role | All Access |
| Custom Role | Create your own custom role, enable/disable permissions as per requirement | Custom Role | Customized |

*Read Only: The features of Dashboard are available in read-only mode to the user.

**Read and Write: The users are allowed to read and also make changes to them.

## Permissions

In any role, there are three sets of permissions

1. **Visibility:** The said feature is visible or hidden
2. **All Access:** The user has all access to the feature, that is, read as well as make updates. Roles with Read and Write permissions will have **All Access** to features (if visible).
3. **Read Only:** The feature is visible in read-only mode; that is, no changes can be made by the user. Roles with Read Permissions will have a restricted view of features that are read-only (the ones that are visible)In system roles, these permissions are pre-defined and hence cannot be modified by the administrator. While creating an admin, simply choose the role, and all permissions under that role will be assigned to the admin.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T190041.848.png)

## Accessibility of features for pre-defined roles

To take a look at the features enabled/disabled under a pre-defined role, click on **View** below each system role. The icons described below will help in identifying the feature accessibility for a particular role.

1. **Visibility:** The feature and sub-feature that would be visible for a role is marked with a green eye icon, and the one that is not is marked with a red eye icon.
2. **All Access:** Marked with green tick mark if allowed, and red hyphen if not allowed
3. **Read-Only:** Marked with green tickmark if allowedIn general, any feature that is not visible will not have all access and read-only permission.

For example, Device Admin (Read and Write) will have access to the following:

Here, the Devices section is visible with all access to users, whereas Android For Work Setup, Apple Setup, and Windows Setup won't be visible to users.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185753.817.png)

### Accessing System Roles

## Device Admin

To access, click on **View** under **Admins and Roles > Roles & Permissions > Device Admin** card.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185644.534.png)

You will be able to view the features with their permission corresponding to each.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185647.762.png)

#### Exceptions

Device Admins with **Read and Write** role will have access to Remote Mirror and Timezone Settings, whereas for Device Admins with **Read Only** role, these will **not be** visible.

## Group Admin

To access, click on **View** under **Admins and Roles > Roles & Permissions > Group Admin** card.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185511.922.png)

You will be able to view the features with their permission corresponding to each.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185515.507.png)

#### Exceptions

1. Group Admins with **Read and Write** roles will have access to Remote Mirror and Timezone Settings, whereas, for those with **Read Only** roles, these will not be visible.
2. **Groups -** Group Admins get read-only access to the Device Groups and User Groups that they administer.
3. **Enrollment Configurations -** Group Admins have visibility to **Manage Organization Users** (User Enrollment) in read-only mode for the groups that they administer. However, **Bulk Enrollment** and **QR code configurations** won't be accessible to them.

## Co-Account Manager

To access, click on **View** under **Admins and Roles > Roles & Permissions > Co-Account Manager** card.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185400.237.png)

You will be able to view the features with their permission corresponding to each.

A co-account manager will have visibility and access to all features.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T185424.817.png)

## Custom Role

To create a custom role:

1. Under the Admin and Roles page, click on the **Roles & Permissions** tab.
2. Click on **Create New** under Custom Roles.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/custom-roles%20(1).png)
3. A new page will open. Fill in the following details:
  1. **Role Name:** Enter a name for this role
  2. **Creating Role:** Choose one, whether you want to create a role for **All Devices or for Device Groups![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T181802.916.png)**
  3. **Permissions:** There are three categories to set permissions:
    1. **Visibility:** Toggle this button to on/off based on whether a particular feature should be visible on the dashboard.
    2. **All Access:** This provides both read and write permissions to the admin.
    3. **Read Only:** This provides read-only permission to the admin.Any feature can either be assigned with All Access or Read Only
4. Once all the permissions are set, click on the **Save Role** button.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/create-custom-role%20(1).png)
5. The custom role created will appear on the Roles & Permissions page.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/supervisor%20(1).png)

## Customizing a pre-defined role

If you want to customize any pre-defined role,

1. Click on View under the system role (which has to be customized)
2. Click on the button **Make a copy![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T181347.744.png)**
3. This opens a page where you can provide a new role name and make changes in permissions to create one based on your requirements.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image%20-%202023-09-13T181417.833.png)

## Assigning a role to admin

If you want to **assign a role** to an admin:

1. Visit the Administrators page and click on the three dots in front of an existing admin. Select **Edit**.
2. This will open the **Edit Admin User** window. Here, in the Role drop-down, select a role and **Submit**All system and custom roles are listed in the Role drop-down**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/account-expiry-2%20(1).png)**
3. The selected role, with all the permissions defined in it, will be assigned to this admin.