The roles that you create are made up from a range of permissions that allow the assigned user to complete certain tasks within CloudM Automate.
However, not all permissions are created equal. There is a hierarchy that means some permissions simply will not work properly unless another permission has also been set. We call this a Parent and Child relationship — the Parent permission always needs to be set in order for the Child permission to have any effect. It is a prerequisite.
Example
A good example of the Parent/Child relationship can be seen when setting permissions to edit profile fields on user profiles.
Giving an admin the ability to change a user's job title
It might seem obvious that you need to select the Edit Job Title permission — and you definitely should. However, this is not enough on its own. You also need to allow the admin to Edit Profiles in general, otherwise the admin will not have the Edit button available on a user profile at all.
So in this example:
- Edit Job Title is the Child permission — it will not work on its own.
- Edit Profiles is the Parent permission — it is required if you want the admin to be able to edit the job title or any other user profile field added to the role.
Parent and Child permission table
The table below shows the default CloudM Automate permissions displayed for all domains. It does not include permissions that are displayed when a specific feature is enabled (such as Archive or partner-specific features).
Reading the table
A permission listed in the Child permission (level 2) column requires both the related permissions listed in the Parent permission and Child permission (level 1) columns to also be assigned.
| Parent permission | Child permission (level 1) | Child permission (level 2) |
|---|---|---|
| Edit Profiles | Edit Addresses | |
| View Aliases | ||
| Edit Aliases | ||
| Edit Assistant | ||
| Edit Birthdays | ||
| Edit Company | ||
| Edit Department | ||
| Edit Emails | ||
| Edit Employment | ||
| Edit Extra Information | ||
| Edit IM Addresses | ||
| Edit Job Title | ||
| Edit Locations | ||
| Edit Manager | ||
| Edit Names | ||
| Edit Notes | ||
| Edit Organisation Description | ||
| Edit Photo | ||
| Edit Predefined Extra Information | ||
| Edit Predefined Hidden Extra Information | ||
| Edit Predefined Tags | ||
| Edit Tags | ||
| Edit Telephone Numbers | ||
| Edit Websites | ||
| Edit Passwords | Force Password Change | |
| 2-Step Verification | ||
| View OU Hierarchy (Global) | Edit OU Information (Global) | View and Edit Workflow Email Templates |
| Edit OU Config | ||
| Manage OUs | ||
| View Hidden | ||
| View Suspended Profiles | ||
| Edit Addresses | ||
| Edit Extra Information | ||
| Edit Names | ||
| Edit Predefined Extra Information | ||
| Edit Predefined Hidden Extra Information | ||
| Edit Tags | ||
| Edit Websites | ||
| Edit Global Settings | Synchronise Domain | |
| Manage Users | Offboard Users | |
| Delete Users | ||
| Apps Integration | ||
| View Last Login | ||
| View Logs | ||
| View Own Logs | ||
| Manage Smart Teams | Export Groups | |
| Managed Smart Teams | ||
| Edit Max Dynamic Group Count |
Need help? Contact CloudM Support