The User Management option helps you to view all the admin role types of the Seqrite mSuite console. You can use the option to assign the Admin Role type. You can assign administrator privileges to a normal user by making the user an Administrator to manage the Seqrite mSuite console. You can assign or remove Admin roles whenever required.
By default, there are five Admin roles (Administrator types): Super Admin, Admin, Advanced, Standard, and Basic. You can edit the Admin roles and privileges as well. However, you cannot edit or delete the default Admin roles. You can create new Administrator roles and assign privileges if required.
The Super Administrator is the main administrator of the Seqrite mSuite console. The Super Administrator can create the Admin by assigning the Admin roles and privileges to any existing user.
The Admin roles are based on privileges with restricted access to the mSuite console.
Super Admin
The Super Admin role is created at the time of Seqrite mSuite company creation. For the entire Seqrite mSuite console, a single Super Admin is assigned. The Super Admin can create multiple Admins with administrator role. The Super Admin has all the privileges such as read, create, update, delete, assign/unassign, approve/disapprove, and perform basic, advance, and critical actions, for all the modules of Seqrite mSuite. The Super Admin also has the privilege to set up services such as APNS, Agent upgrade, Agent preference etc. and also can customize the reports as per requirement.
Assigning Super Admin role to an Admin
In many instances, the Admin may be responsible to perform all or similar activities of Super Admin. With Seqrite mSuite, the Super Admin can assign any Admin, a Super Admin privilege. This functionality helps to allocate and utilize the resources effectively.
When an Admin is assigned a Super Admin role, the Admin gets the privilege to make changes to all the Setup Services settings. Thus, such Admin can view the Settings option on Seqrite mSuite console and perform all the Super Admin responsibilities.
Admin
The Admin can access those users, which are assigned in a particular department and have all the privileges similar to Super Admin. The Admin can create multiple Administrators with restricted or complete access to the Seqrite mSuite console.
Advanced
The Advanced Admin role type has all the privileges except the delete privilege for the assigned department only. The Advanced Admin role doesn’t have any privilege to create, update, assign/unassign, and delete admin role. Also, cannot upgrade or renew the license.
Standard
The Standard Admin role type has all the privilege such as update, assign, and unassign. The Standard Admin role is restricted only to the assigned department.
The Standard Admin role cannot:
- Create or delete users, departments, groups, policies, configurations. Also, cannot renew or upgrade the license.
- Create/delete/update/assign/unassign any Admin role.
- Create/delete/approve/disapprove devices.
- Perform any advance action such as wipe/lock/unlock/uninstall/push policy or configuration.
- Delete the notifications.
Basic
The Basic Admin role type has Read-Only privileges, with restricted visibility of mSuite console. The Basic Admin role can export the data and view the privileges but cannot assign any privileges to the user.
The table below helps you to understand the privileges assigned to the Admin role. These are the default privileges with the following indications:
: User has the permission 
: User does not have the permission
| Privileges | Entity/Admin Roles | ||||
|---|---|---|---|---|---|
| Basic | Standard | Advanced | Admin | Super | |
| User | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Send enrollment request | |
|
|
|
|
| Admin Role | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Assign/Unassign | |
|
|
|
|
| Device | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Assign/Unassign | |
|
|
|
|
| Approve/Disapprove | |
|
|
|
|
| Basic Action (Ring/locate/trace/scan/sync) | |
|
|
|
|
| Advanced Action (wipe/lock/unlock/uninstall/Push policy or configuration) | |
|
|
|
|
| Critical Action (Wipe/uninstall/disconnect/exit launcher) | |
|
|
|
|
| Group | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Assign/Unassign | |
|
|
|
|
| Policy | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Apply/Revoke | |
|
|
|
|
| Configuration | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Apply/Revoke | |
|
|
|
|
| Export | |||||
| Export | |
|
|
|
|
| Report | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Delete | |
|
|
|
|
| Update | |
|
|
|
|
| App Control | |||||
| Read | |
|
|
|
|
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| App Repository | |
|
|
|
|
| Assign/Unassign | |
|
|
|
|
| Notification | |||||
| Read | |
|
|
|
|
| Delete | |
|
|
|
|
| Workspace Device Actions | |||||
| Basic Actions*(Ring/locate/trace/scan/sync) | |
|
|
|
|
| Advanced Action**(wipe/lock/unlock/uninstall/Push policy or configuration) | |
|
|
|
|
| Critical Actions***(Wipe/uninstall/disconnect/exit launcher) | |
|
|
|
|
| Workspace Policy | |||||
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Apply/Revoke | |
|
|
|
|
| Workspace Profile | |||||
| Create | |
|
|
|
|
| Update | |
|
|
|
|
| Delete | |
|
|
|
|
| Apply/Revoke | |
|
|
|
|
- You can change the privileges as per your requirement or you can assign the default privileges.
Group-wise visibility for mSuite console
With restricted visibility, the Admin gets the privilege to manage only the assigned group and gets access of the devices, users, app configurations and other entities of that particular group.
When such restricted user with Admin role creates a department, then a group is also created automatically with the same department name. Thus, the devices associated with that group are visible and the respective administrator can manage them. If any configuration is applied on the device, then such configuration is also visible to the Administrator.
With restricted console visibility, the Administrator receives only those notifications that are limited to specific group. Only the Super admin can generate the custom reports and other admins can generate and schedule the standard report.
Advanced Search for Admin roles
The Advanced Search option allows you to perform an advanced search for different Admin roles. To search Admin roles with advanced search option, follow these steps:
- Log on to the Seqrite mSuite console and in the right upper corner, click the logged on user name > click User Management > Advanced Search.
- From the Select Created By list, select the desired creator name and click Search. The result gets displayed.
User Management List Page
The Admin Roles list page displays all the available Admin roles in Seqrite mSuite console. The table shows the information about all the Admin roles.
With selected options for Admin roles
The With selected list appears on the Admin Roles page when you select single or multiple Admin roles. The available options in the With selected list are:
- Create Copy: Helps to create a duplicate copy of a single or multiple selected Admin role.
- Delete: Helps to delete a single or multiple selected Admin role.
Note:
- You cannot delete the default Admin roles.
- You cannot delete a user assigned to a Admin role. Select the required options and click Submit.