Roles - Managing Administrator Roles

This article contains information on managing administrator roles using the Role Editor, including accessing the editor, creating and managing custom roles, and adding or removing users.

Administrator roles are managed using the Role Editor. This allows administrators to:

• • • Control the users assigned to roles.
    • Create custom roles in addition to the default roles provided

Accessing the Role Editor

To access the Role Editor, the administrator must have the correct Security Permissions as detailed below. Without these permissions, the Roles tab is not displayed in the Mimecast Administration Console.

To display the Role Editor:

1. Log in to the Mimecast Administration Console.
2. Navigate to Account | Roles.

Creating a Custom Role

To create a custom role:

1. Click New Role in the Role Editor.
2. Complete the Properties section as follows:

   Field / Option	Setting
   Role Name	Enter a name to uniquely identify the role.
   Description	Enter a description of the role to help you identify its purpose.

3. Select one of the following Security Permissions: 

   Permission	Description
   Cannot Manage Roles	Users added to the role can't access the Roles Editor.
   Manage Application Roles	Users added to the role can access the Roles Editor and manage access to individual Mimecast Administration Console menu items. Protected areas of Mimecast cannot be modified.
   Manage Application and Protected Roles	Users added to the role can access the Roles Editor and manage access to individual Mimecast Administration Console menu items and protected areas of Mimecast.

4. Select/Deselect the Application Permissions for the role. These can be set at various levels as outlined below, with the three categories of access permissions being:

• • • • • Read: Users can access the menu item but cannot make any modifications.
        • Edit: Users can modify the elements contained in the menu item.
        • Protected areas: Users have access to the content of email data.

5. Click Save and Exit.

Managing a Custom Role

You can view which users are assigned to a Custom Role. Once displayed, you can:

• • • Change the role.
    • Copy the role; useful if there is an existing role you can use as a template for creating a custom role.
    • Add users to the role.
    • Remove users from the role.

Changing a Custom Role

To change a custom role:

1. Click on the Edit Role button inside the Role Editor.
2. Change the role as required.
3. Click on the Save and Exit button.

The Super Administrator has the privilege or right to elevate other administrators below Super Administrator role.

Copying a Role

To copy a role:

1. Right-click on the Role to be copied inside the Role Editor.
2. Select the Copy Role popup menu item. A custom role is added to the bottom of the list of roles.

Adding Users to a Role

You can't allow alias addresses to be used as administrator accounts. If an existing administrator account becomes an alias, the account is removed from the administrator role.

A user can only belong to one role at any given time. If a user is added to a second role, the entry in the first role is automatically removed.

To add users to a role:

1. Right-click on the Role from inside the Role Editor.
2. Select Add Users to Role.
3. Click the Tick Box to the left of the users to be added.
   
4. Click Add Selected Users.

Removing Users from a Role

To remove a user from a role:

1. Right-click on the Role in the Role Editor.
2. Select Manage Users for Role.
3. Right-click on the User to be removed.
4. Select the Remove User from Role menu item.

Deleting a Custom Role

To delete a custom role:

1. Remove all users from the role. You'll be unable to delete the role unless you complete this step.
2. Right-click on the Role from inside the Role Editor.
3. Select the Remove Role popup menu item.

See Also...

• • • Protected Content Administrators
    • Mimecast Partner - MSP Partner Managing Partner Administrators
    • Understanding Administrator Roles