Each role determines the privilege level you have in Control Hub. If you have full administrator privileges, you can assign one or more roles to any user in your organization.

When your account is first set up, the administrator from the partner organization becomes the full administrator for your organization, and can set up additional administrators. By default, additional users that you add have no administrative privileges.

Depending on the role you assign to a user, they can have access to:

• User Management—The user can add and delete users, assign administrative roles to users, manage users statuses, and manage licenses for users.

• Device Management—The user can register or deregister new devices and phone numbers, generate activation codes, and manage places.

• Company Policy and Templates—The user can manage the Webex Teams content retention policy and configure security settings such as blocking file uploads and blocking external communications.

• Analytics and Reports—The user can only access the Analytics tab to view Webex services usage data.

• Troubleshooting—The user can only access the Troubleshooting tab to view recent Webex meetings details.

• Webex Site Management—The user can add, modify, and delete Webex sites if the partner enabled Webex site management for customers.

• Admin Actions Audit Log—The user can view and export administrator activity logs.

• Access to User-generated Content—The user can access the Events API and eDiscovery reports to see user-generated content in Webex Teams.

• Legal Hold—The user can override the Webex Teams content retention policy to support legal cases.

You can add anyone outside of your organization as an external administrator. Administrators from a partner organization are also considered external administrators in your organization. You can also manage external administrator privileges, and define them as external full administrators, external read-only administrators, and provisioning administrators. Provisioning administrators are added when a partner provisions your Webex services orders.

You can remove external administrators from your organization at any time. But as long as an active selling relationship exists between your organization and the partner you purchased services from, then that partner that can regain access to your organization by assigning themselves the role of Provisioning Administrator. The partner can’t assign themselves access as Full Administrator. If you don’t want for the partner you purchased services from to have access to your organization at all, then you must contact the partner.

Anyone outside your organization that has access your organization’s Control Hub is shown in the Users section under the External Administrators tab.

Support staff that access your organization will generally have the role of read-only administrator. Read-only administrator access is automatically revoked after some time. You can grant or deny administrative access to anyone.

Assign external administrators as full, read-only, or provisioning administrators in order to clearly define what their responsibilities are in your organization. Dividing administrative responsibilities can also ensure greater accountability within your organization.