CloudM provides Role-Based Access Control (RBAC) to help organizations maintain strict security over their Google Workspace data. By linking specific permissions to custom roles, you can delegate the management of CloudM Email Signatures to specific users without granting them full administrative access.
These roles can be scoped globally (domain-wide) or limited to specific Organizational Units (OUs).
Recommendation: While you can add signature permissions to existing roles, we strongly recommend creating a dedicated Signature Manager role. This ensures granular control and prevents unintended access to other system areas.
Recommended Permissions
To ensure the delegated user has full control over signature management, we recommend assigning the following permissions. While the Signature Manager template includes some of these by default, you may need to add others manually to unlock full functionality.
Manage Email Signatures
View and Edit Email Signatures Library
View OU Hierarchy
Edit Emails
Edit Predefined Extra Information
Edit Predefined Tags
How to Create a Signature Manager Role
Follow these steps to create a new role and configure the necessary permissions.
Navigate to Settings > Roles.
Click on Create new Role.
Enter a Name for the new role (e.g., "Signature Manager").
Check the box for Create from template.
In the drop-down menu, select Signature Manager.
(Optional) Add a Description for the role (e.g., "Manages email signatures for the Marketing team").
Choose the Scope of the new role based on your requirements:
Global: Access to the entire domain.
Specific OU: Access to a single OU only.
OU and Child-OUs: Access to an OU and all its sub-units.
Parent OU: Access to the parent of a specific unit.
Own Profile: Access only to their own data.
Select Create New Role.
Configuring Permissions
Once the role is created, you will be directed to the role configuration screen.
Click the Permissions tab. You will see that the template has automatically added the core signature permissions.
To grant full management capabilities, locate the following permissions in the Available list and move them to the Selected list:
Edit Emails
Edit Predefined Extra Information
Edit Predefined Tags
Click Save to confirm your changes.
You can now assign this role to specific users via the Users section.