Creating a role for Managing Users

You can create a role that allows administrators (typically your Human Resources team or Department Managers) to manage other users within their domain. This includes being able to create, rename and move users in the domain. 

This is done by assigning the Automate Users permissions to a role, and then assigning the role to an individual or group.

1. Select Settings and then click on Roles
2. Click Create new Role,
   • If you cannot see the Create new Role button, click on the x in the top corner of the section as you will be in the Permissions section of an existing role.
3. Give the new role a Name
4. You can enable Create from template and then Select Template from the drop down menu, if required. This will add a set of predefined permissions to the new role based on the role template selected. You can still unassign the role template or individual roles that have been set.
5. Add a Description, if required.
6. Set Scope to Global (or limit to an OU if needed)
7. Select Create new Role to save the new role.
8. Select the new role in the Roles column
9. Select the Permissions tab.
10. Move the Automate Users permission (and another other permission you want the role to have) from the Unused Permissions column to the Assigned Permissions column.
11. Select Save
12. Move to the Role Assignment tab
13. From the Assign To drop down menu, select if you are assigning the role to an Org Unit, individual user Profile, Group, Service Account, External Profile or External Group.
14. Select the Name of the Holder that you want to assign the role to (depending on the holder type selected in the Assign To drop down e.g. Org Unit name or User Profile name)
15. Set Org Unit to the top level OU / domain
16. Select Add.
17. The user or group will now appear in the table on the Assigned Users tab.

Once a new role has been assigned to them, a user needs to either refresh their page (if already logged in) or log in before they will see and be able to use their new permissions.