Creating a custom role

If you are logged in as a System Administrator, you can create custom roles. For example, you may want to create a role based on the Classic Power User role and add a few individual permissions, such as the following permissions to submit and track Script requests:

  • Run permission for Reach Script
  • View permissions for Audit Event History

Creating a custom role consists of four or five steps, depending on whether you want to assign users to the role during the creation process:

Step 1: Assign base permissions to the new role by selecting a Classic role

Step 2: Define the new role's name and description

Step 3: Set permissions for each feature that you want the role to have access to

Step 4: Select the roles that the role can manage

Step 5: Assign users to the new role

Alternatively, you can copy an existing role and modify the permissions.

To create a new custom role:

  1. Log in to the Absolute console as a System Administrator.
  2. On the navigation bar, click and on the sidebar, click User Management.
  3. On the User Management sidebar, click Roles.
  4. On the Roles sidebar, click . The Create New Role dialog opens.
  5. On the Assign Classic Role page:
    1. Click the Guest User field and select a role to view it's permissions in the grid. You'll notice that these permissions apply to Classic features only.
    2. NOTE   Classic features are those features that were included in the DDS 5 area of the console in prior versions of Absolute.

    3. Review the permissions associated with each Classic role. Be aware that the permissions are read-only and can't be edited.
    4. When you've decided which set of permissions you want to assign to your new custom role, click the field and select the applicable Classic role.
    5. Click Next.
  6. On the Define Role and Permissions page:

    1. In the Name field, enter a name for this new role. The following special characters are supported: .(period), ?, /, \, and #.
    2. [Optional] Click the plus sign next to Description to add a description for this role.
    3. To ensure that the user can access basic console functionality, including Device Details, select the following permissions:
      • View permissions for Device Fields
      • View permissions for Device reports
    4. To assign additional permissions for the features that you want the role to have access to, do the following:
      • To assign view and export (if applicable) permissions for a feature, select the View check box.
      • To assign view, export (if applicable), and edit permissions for a feature, select the Manage check box. The View check box is selected automatically.
      • To assign Activate, Publish, Run, or Perform permissions for a feature, select the feature's applicable Other Actions check box. If a View check box is associated with the feature, select it as well.
    5. [Optional] Assign the limits for the number of Device Action requests that can be completed before the request must be authorized.
    6. Click Next.
  7. On the Assign Manageable Roles page, do the following:
    1. Select the check box next to each role that you want this role to be able to manage. To select all roles, select the check box in the header. Managing a role includes assigning the role to users and editing users assigned to that role.
    2. To allow this role to manage other users assigned to the same role, select the check box next to Include new role in the list.
  8. On the Assign Users page, do one of the following:
    • To assign users to this role now:
      1. Use the Search field to search for one or more users.
      2. Select the check box next to each user you want to assign to this role.
      3. Click Create Role.
    • To assign users later, click Create Role.
  9. On the confirmation dialog that indicates the custom role was created successfully, click Close.
  10. If you want other roles to be able to manage the new role you created, edit each role's managed roles.