Access Privileges for Role Scopes (Operating Company and Tenant)

This topic describes the access privileges for the Operating Company (OpCo) and tenant role scopes. For more information about roles and role scopes, see Roles Overview.

Table 1 shows the access privileges for operating company scope.

Table 2 shows the access privileges for tenant scope.

Table 1: Access Privileges for Operating Company Scope
Role Scope	Menu Name	Actions	Other Actions
Operating company (OpCo)	SP Geo Map	Read	-
	Tenants SLA Performance	Read	-
	Alerts	Read and Delete	-
	Alarms	Read and Delete	-
	Security Alert Definitions	Read	-
	Jobs	Read	Retry Schedule Update Schedule Delete
	POPs	Read	-
	Provider Hub Devices	Read	-
	Tenant Devices	Read	Configure Stage-2
	Device Templates	Read, Create, Update, and Delete	Clone Edit Template
	Images	Read	Upgrade History Deploy Stage
	SLA Based Steering Profiles	Read, Create, Update, and Delete	-
	Path Based Steering Profiles	Read, Create, Update, and Delete	-
	Application Traffic Type Profiles	Read	-
	Network Services	Read	Detach Allocate
	Tenants	Read, Create, Update, and Delete	-
	Users	Read, Create, Update, and Delete	-
	Roles	Read, Create, Update, and Delete	-
	Audit Logs	Read	Purge
	Authentication	Read, Create, Update, and Delete	-
	Device Licenses	Read, Create, Update, and Delete	Push
	CSO Licenses	Read, Create, and Update	-
	Dynamic Mesh	Read and Update
	Signature Database	Read	-
	SMTP	Read and Update	-
	Terms of Use	Read and Update
	Email Templates	Read and Update	-
	Getting Started	Read	-
	What’s New	Read	-
	Help Center	Read	-
	FAQ	Read	-
	Release Notes	Read	-
	About	Read	-

Table 2: Access Privileges for Tenant Scope
Role Scope	Menu Name	Actions	Other Actions
Tenant	Tenant GeoMap	Read	-
	Link Switch Events	Read	-
	Jobs	Read	Retry Schedule Update Schedule Delete
	Security Alert Definitions	Read, Create, Update, and Delete	-
	Alerts	Read and Delete	Jump to Event Viewer
	Alarms	Read and Delete	-
	Security Events	Read	Manage Filter Create Alert Create Report
	Application Visibility	Read	-
	Threats Map (Live)	Read	-
	Application SLA Performance	Read	-
	Devices	Read	Activate Traceroute Ping Push License Reboot RMA Discover APs Configure Stage2
	Device Configuration	Read and Update	-
	Images	Read	Upgrade History Stage Deploy
	Deployments	Read	Deploy Schedule
	Network Services	Read, Update, and Delete	Start Disable
	SD-WAN Policy	Read and Update	Deploy
	Tenant SLA Based Steering Profiles	Read, Create, Update, and Delete	-
	Tenant Path Based Steering Profiles	Read, Create, Update, and Delete	-
	Cloud Breakout Profiles	Read, Create, Update, and Delete	Assign Sites
	Firewall Policy	Read, Create, Update, and Delete	Deploy
	SSL Policy	Read, Create, Update, and Delete	Deploy
	NAT	Read, Create, Update, and Delete	Deploy
	UTM	Read, Create, Update, and Delete	-
	Schedule	Read, Create, Update, and Delete	-
	Address	Read, Create, Update, and Delete	-
	Department	Read, Create, and Delete	-
	Service	Read, Create, Update, and Delete	-
	Application Signature	Read, Create, Update, and Delete	Clone
	Site Management	Read, Create, and Delete	Configure Upgrade
	Site Groups	Read, Create, Update, and Delete	-
	Site LAN Segment	Read, Create, and Delete	Deploy Deploy History Re-assign
	Mesh Tags	Read, Create, and Delete	-
	Report Definitions - Security	Read, Create, Update, and Delete	Run Preview Send Clone
	Report Definitions - SD-WAN	Read, Create, Update, and Delete	Run Preview Send Clone
	Generated Reports -Security	Read and Delete	-
	Generated Reports SD-WAN	Read and Delete	-
	Users	Read, Create, Update, and Delete	-
	Roles	Read, Create, Update, and Delete	-
	Audit Logs	Read	Purge
	Device Licenses	Read, Create, Update, and Delete	Push License
	CSO Licenses	Read	-
	Tenant Setting	Read, Create, and Update	-
	Tenant Signature Database	Read	Install
	Certificates	Read, Create, Update, and Delete	-
	VPN Authentication	Read	Renew CRL
	Identity Management	Read and Update	-
	Wi-Fi Settings	Read and Update	-
	Getting Started	Read	-
	What’s New	Read	-
	Help Center	Read	-
	FAQ	Read	-
	Release Notes	Read	-
	About	Read	-

Access Privileges for Role Scopes (Operating Company and Tenant)

Related Documentation