Assign Roles to Users
In Control Hub, you can learn about different privilege levels and set up a customer administrator. Customer administrators can be full administrators, support administrators, user and device administrators, device administrators, read-only administrators, or compliance officers. With full administrator privileges, you can assign one or more roles to any user in your organization.
You’ll always want to have more than one administrator for an organization. It’s a best practice and will always allow you to make administrative changes if one of the administrators isn't available.
Users within your organization can be assigned specific administrative roles to determine what they can see and have access to in Control Hub. When you assign specific administrative roles, you streamline responsibilities and make it easier to hold administrators accountable. Compliance officers can look for specific people in your company, find content they've shared, or search through a specific space and then generate a report of their findings.
For information about HCS Administrator Privileges in Cisco Webex Control Hub, see https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/hcs/12_5/HCS_Solution/Upgrade_Service/chcs_b_upgrade-service-book/chcs_b_upgrade-service-book_chapter_010.html |
1 |
From the customer view in https://admin.webex.com, go to Users, and choose a user. |
2 |
Under Roles and Security click Administrator Roles or Service Access. |
3 |
Select a role to assign to that user. |
4 |
Select Save. |
List All or Specific Administrators in Control Hub
For example, if you want to see a list of compliance officers in your organization, you can use the drop-down list to only show compliance officers.
1 |
From the customer view in https://admin.webex.com, go to Users, and select the Administrators tab. |
2 |
Click on the administrator roles drop-down list, and select the administrator role you want to view. |
Organization Roles
Each role determines the privilege level you have in Control Hub. If you have full administrator privileges, you can assign one or more roles to any user in your organization.
When your account is first set up, the administrator from the partner organization becomes the full administrator for your organization, and can set up additional administrators. By default, additional users that you add have no administrative privileges.
Access |
Full Administrator |
Read-Only Administrator |
Support Administrator |
User and Device Administrator |
Device Administrator |
Compliance Officers |
Advanced Troubleshooting Access |
---|---|---|---|---|---|---|---|
Add/Delete Users and Assign Licenses |
✔ |
Read-Only |
✔ |
||||
Assign Roles to Users |
✔ |
Read-Only |
|||||
Device Management |
✔ |
Read-Only |
✔ |
✔ |
|||
Company Policy and Templates |
✔ |
Read-Only |
|||||
Analytics and Reports |
✔ |
Read-Only |
✔ |
||||
Troubleshooting |
✔ |
Read-Only |
✔ |
||||
Licenses and Upgrades |
✔ |
Read-Only |
✔ |
||||
Webex Site Management |
✔ |
Read-Only |
|||||
Admin Actions Audit Log |
✔ |
||||||
Access to User-generated Content |
✔ |
||||||
Legal Hold |
✔ |
||||||
Access to Join In Progress Meetings |
✔ |
||||||
Access to Live Meetings |
✔ |
Depending on the role you assign to a user, they can have access to:
-
User Management—The user can add and delete users, assign administrative roles to users, manage users statuses, and manage licenses for users.
-
Device Management—The user can register or deregister new devices and phone numbers, generate activation codes, and manage places.
-
Company Policy and Templates—The user can manage the Webex app content retention policy and configure security settings such as blocking file uploads and blocking external communications.
-
Analytics and Reports—The user can only access the Analytics tab to view Webex services usage data.
-
Troubleshooting—The user can only access the Troubleshooting tab to view recent Webex meetings details.
-
Webex Site Management—The user can add, modify, and delete Webex sites if the partner enabled Webex site management for customers.
-
Admin Actions Audit Log—The user can view and export administrator activity logs.
-
Access to User-generated Content—The user can access the Events API and eDiscovery reports to see user-generated content in the Webex app.
-
Legal Hold—The user can override the Webex app content retention policy to support legal cases.
Advanced Troubleshooting Access Role
This role allows full administrators, read-only administrators, and support administrators to access the Live Meeting page in the Troubleshooting tab, and lets full administrators join meetings that are in progress with just the click of a button. If participants are having issues during meetings, administrators with this role can quickly find those meetings to join and help sort out the issues.
For more information about the Live Meeting page and the Admin Join feature, see Advanced Diagnostics and Troubleshooting in Control Hub.
Full administrators can assign the Advanced Troubleshooting Access role to another full administrator, read-only administrator, or support administrator within their organization. Full administrators can’t assign the Advanced Troubleshooting Access role to themselves. Another full administrator must assign the role to them. |
External Administrator Roles
You can add anyone outside of your organization as an external administrator. Administrators from a partner organization are also considered external administrators in your organization. You can also manage external administrator privileges, and define them as external full administrators, external read-only administrators, and provisioning administrators. Provisioning administrators are added when a partner provisions your Webex services orders.
You can remove external administrators from your organization at any time. But as long as an active selling relationship exists between your organization and the partner you purchased services from, then that partner that can regain access to your organization by assigning themselves the role of Provisioning Administrator. The partner can’t assign themselves access as Full Administrator. If you don’t want for the partner you purchased services from to have access to your organization at all, then you must contact the partner.
Anyone outside your organization that has access your organization’s Control Hub is shown in the Users section under the External Administrators tab. |
Support staff that access your organization will generally have the role of read-only administrator. Read-only administrator access is automatically revoked after some time. You can grant or deny administrative access to anyone.
Access |
External Full Administrator |
External Read-Only Administrator |
Provisioning Administrator |
---|---|---|---|
User Management |
✔ |
Read-Only |
|
Device Management |
✔ |
Read-Only |
|
Company Policy and Templates |
✔ |
Read-Only |
|
Troubleshooting |
✔ |
Read-Only |
|
Support Metrics and Notifications |
✔ |
Read-Only |
|
Licenses and Upgrades |
✔ |
Read-Only |
✔ For the services the partner sold. |
Assign Roles |
✔ |
Read-Only |
|
Provision Orders |
✔ |
✔ For the services the partner sold. |
|
Add and Delete Sites |
✔ For the sites belonging to the subscription which the partner sold. |
✔ For the services the partner sold. |
|
Assign external administrators as full, read-only, or provisioning administrators in order to clearly define what their responsibilities are in your organization. Dividing administrative responsibilities can also ensure greater accountability within your organization.
The Sales Full Administrator and Sales Administrator Role
The sales full administrator and sales administrator roles are only available to partner organizations in Control Hub. Full administrators and other sales full administrators of partner organizations can assign the sales full administrator role or the sales administrator role to other users.
Sales full administrators and sales administrators who provision a Webex service order can either create a new customer organization or provision an order for an existing one. If a sales full administrator or sales administrator creates a new customer organization, they're automatically granted full administrator privileges to the customer organization. If the customer exists, they're granted the provisioning administrator role.
At any time, a full administrator in a customer organization can change or remove an administrator's role from the partner organization. However, you can always reinstate administrative access if your organization sold services to this customer.
Access |
Full Administrator |
Sales Full Administrator |
Sales Administrator |
---|---|---|---|
Partner Organization Management |
✔ |
||
Customer Organization Management |
✔ (All customers managed by the partner organization.) |
✔ (Assigned customers only.) |
|
Assign Sales Administrator Roles |
✔ |
✔ |
|
Provision Webex Orders for the Partner Organization |
✔ |
||
Provision Webex Orders for Customers |
✔ |
✔ |
|
Begin and Manage Webex Trials |
✔ |
✔ |
|
As a full administrator or sales full administrator, you can assign any user in your organization the role of sales full administrator or sales administrator.
If you have both the full administrator and sales full administrator roles, you can remove the sales full administrator role from yourself and assign it to a different user. A user can have the role of a sales full administrator or sales administrator along with being a full administrator. |
1 |
From the partner view in https://admin.webex.com, go to Administrators, and click New Administrators. |
2 |
Enter the email of the user that you want to add as a Sales Administrator, and click Validate. |
3 |
Choose to make the user a:
|
4 |
Click OK. |
Sales administrators can only access organizations that you assigned them to manage.
1 |
From the partner view in https://admin.webex.com, go to Administrators and select an administrator. |
2 |
Under Managing Customer Organizations, enter the customer's organization name or organization ID that you want the sales administrator to manage. |
3 |
Click Add. |