Access Privileges for Role Scopes (Tenant and Operating Company)

This topic describes the access privileges for the tenant and Operating company (OpCo) role scopes. For more information about roles and role scopes, see Roles Overview.

Table 1 shows the access privileges for operating company scope.

Table 2 shows the access privileges for tenant scope.

Table 1: Access Privileges for Operating Company Scope
Role Scope	Menu Name	Actions	Other Actions
Operating company (OpCo)	`Monitor`
	SP Geo Map	Read	-
	Tenants SLA Performance	Read	-
	Alerts	Read and Delete	-
	Alarms	Read	-
	Jobs	Read	Retry Schedule Update Schedule Delete
	`Resources`
	POPs	Read, Edit, and Delete	-
	Provider Hub Devices	Read, Edit, and Delete	-
	Tenant Devices	Read	-
	Device Templates	Read, Create, Update, and Delete	Clone Edit Template
	Configuration Templates	Read, Edit, and Delete	-
	Images	Read	-
	`Configuration`
	Site management	Edit and Delete	Add provider hub
	Path based steering profiles	Read, Edit, and Delete	-
	SDWAN Breakout Profiles	Read, Edit, and Delete	-
	Application Signatures	Read, Edit, and Delete	-
	Network Services	-	Allocate Server and Detach Server
	Application SLA Profiles	Read, Create, Update, and Delete	-
	Application Traffic Type Profiles	Read	-
	Tenants	Read, Create, Update, and Delete	-
	`Administration`
	Users	Read, Create, Update, and Delete	-
	Roles	Read, Create, Update, and Delete	-
	Audit Logs	-	Explore and Purge
	Authentication	Read, Create, Update, and Delete	-
	Licenses	Read, Create, Update, and Delete	Push License
	Dynamic Mesh	Edit	-
	Signature Database	Read	Download Signature Database
	SMTP	Read, Create, Update, and Delete	-
	Email Templates	Read and Update	-
	Terms of Use	Update	-
	Display Differences	Modify	-
	`Help Menu (?)`
	Getting Started	Read	-
	What’s New	Read	-
	Quick Help	Read	-
	Help Center	Read	-
	FAQ	Read	-
	Release Notes	Read	-
	About	Read	-

Table 2: Access Privileges for Tenant Scope
Role Scope	Menu Name	Actions	Other Actions
Tenant	`Monitor`
	Tenant GeoMap	Read	-
	Alerts	Read and Delete	Jump to Event Viewer
	Alarms	Read and Delete
	Link Switch Events	Read	-
	Traffic Logs	Read	View only threat Show exact match Show raw log Create Alert Create Report Export to CSV
	Security Events	Read	Manage Filter Create Alert Create Report
	Application SLA Performance	Read	-
	Application Visibility	Read	-
	User Visibility	Read and Edit	-
	Threats Map (Live)	Read	-
	Jobs	Read	Retry Schedule Update Schedule Delete
	`Resources`
	Site Management	Read, Create, and Delete	Configure Upgrade
	Devices	Read and Delete	Activate Push License Reboot RMA Traceroute Ping Configure Stage-2
	Site Groups	Read, Create, Update, and Delete	-
	Mesh Tags	Read, Create, and Delete	-
	Site Templates	Read, Create, Clone, and Delete	-
	Device Templates	Read, Update, and Delete	Import device templates
	Configuration Templates	Read, Update, and Delete	-
	Images	Read	Upgrade History Deploy Stage
	`Configuration`
	Firewall Policy	Read, Create, Update, and Delete	Deploy
	Schedule	Read, Create, Update, and Delete	-
	Default Settings	Edit	-
	Unified Threat Management	Read, Create, Update, and Delete	-
	NAT Policies	Read, Create, Update, and Delete	Deploy
	NAT Pools	Read, Create, Update, and Delete	Deploy
	IPS Profiles	Read, Create, Update, and Delete	Clone
	IPS Signatures	Read, Create, Update, and Delete	Clone Clear All Sections
	SSL Proxy Policy	Read, Create, Update, and Delete	Deploy Clone
	SSL Proxy Profiles	Read, Create, Update, and Delete	Clone
	SD-WAN Policy	Read, Create, Update, and Delete	Deploy Clone
	SLA Based Steering Profiles	Read, Create, Update, and Delete	Clone
	Path Based Steering Profiles	Read, Create, Update, and Delete	-
	Cloud Breakout Profiles	Read, Create, Update, and Delete	Assign Sites Detach Sites
	Port Profiles	Read, Create, Update, and Delete	Clone
	Authentication Profiles	Read, Create, Update, and Delete	Clone
	Firewall Filters	Read, Create, Update, and Delete	-
	Access Profiles	Read, Create, Update, and Delete	Clone
	RADIUS Server Profiles	Read, Create, Update, and Delete	Clone
	Address	Read, Create, Update, and Delete	-
	Department	Read, Create, and Delete	-
	Service	Read, Create, Update, and Delete	-
	Application Signature	Read, Create, Update, and Delete	Clone
	Protocols	Read, Create, Update, and Delete	-
	Network Services	Read, Update, and Delete	Start Disable
	`Reports`
	Report Definitions - Security	Read, Create, Update, and Delete	Run/Preview Send Clone
	Report Definitions - SD-WAN	Read, Create, Update, and Delete	Run/Preview Send Clone
	Generated Reports -Security	Read and Delete	-
	Generated Reports SD-WAN	Read and Delete	-
	`Administration`
	Users	Read, Create, Update, and Delete	-
	Roles	Read, Create, Update, and Delete	-
	Audit Logs
	Device Licenses	Read, Create, Update, and Delete	Push License
	CSO Licenses	Read
	Tenant Setting	Read, create, and update
	Tenant Signature Database	Read	Install
	Certificates	Read, Create, Update, and Delete	-
	Identity Management	Read and Update	-
	Wi-Fi Settings	Read and Update	-
	`Help Menu (?)`
Getting Started	Read	-
What’s New	Read	-
Quick Help	Read	-
Help Center	Read	-
FAQ	Read	-
Release Notes	Read	-
About	Read	-

Access Privileges for Role Scopes (Tenant and Operating Company)

Related Documentation