Role Based Access Control Overview

While on-boarding the partner and customer Organization, a Full Administrator role is created respectively for both partner and customer. In case a partner organization exists, the Full Administrator Role is not created for the partner.

A full administrator can set up additional administrators. By default, additional users that you add have no administrative privileges.

Having a full administrator privileges allows you to assign one or more roles to any user in your organization. You can assign administrative roles to users within your organization, to determine what they can see and access in Control Hub.

The Control Hub allows you to assign role to users as per their responsibilities, and the work requirement.

Such as a Helpdesk Admin can enable or disable the Analytics for a Node from UCM Cloud > Analytics Inventory tab, but by default a Helpdesk Admin is assigned with Read Only permission. However, to allow this operation, the Customer Admin must explicitly assign Full Admin permission to the Helpdesk admin.

Similarly you can also assign UC-Read only Administrator Role and Sales Administrator Role to view Flex Usage Report and to manage your customers, see Assign UC-Read only Administrator Role in Assign the Role of UC Partner Read only Administrator.

You can also manage external administrator privileges, and define them as external full administrators, external read-only administrators, and provisioning administrators. After on-boarding to UCM Cloud, if a partner is assigned with the Provisioning Administrator role, we recommend you to change this role to the External Full Administrator, to access UCM Cloud Analytics and Reports.

To create and assign roles within your organization, see Assign Organization Account Roles in Cisco Webex Control Hub.