Additional System Admin Roles 

Assigning Admin Roles 

System Admins can assign roles using the System Console or the mmctl tool. This can be done either locally or remotely.

In the System Console

• Go to System Console > User Management > System Roles > Assigned People.

  Using the mmctl tool

  The format of the mmctl command is:

  mmctl permissions role assign [role_name] [username...]

To grant the System Manager role to a single user called Bob Smith:

In the System Console

1. Go to System Console > User Management > System Roles then select the System Manager role.

2. Under Assigned People, choose Add People.

3. Search for and select Bob Smith, then select Add to grant the System Manager role to that user.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions role assign system_manager bob-smith

To grant the User Manager role to two users, Bob Smith and Sue Clark:

In the System Console

1. Go to System Console > User Management > System Roles then select the User Manager role.

2. Under Assigned People, choose Add People.

3. Search for and select Bob Smith and Sue Clark, then select Add to grant the User Manager role to those users.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions role assign system_user_manager bob-smith sue-clark

To grant the Viewer role to two users, Bob Smith and Sue Clark:

In the System Console

1. Go to System Console > User Management > System Roles then select the Viewer role.

2. Under Assigned People, select Add People.

3. Search for and select Bob Smith and Sue Clark, then select Add to grant the Viewer role to those users.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions role assign system_read_only_admin bob-smith sue-clark

To remove the System Manager role from a single user called Bob Smith:

In the System Console

1. Go to System Console > User Management > System Roles then select the Viewer role.

2. Under Assigned People search for Bob Smith, then select Remove.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions role unassign system_manager bob-smith

Editing Privileges of Admin Roles (Advanced) 

Each of the admin roles have defined, default privileges as outlined above.

System Admins can grant read and write access to other areas of the System Console, as well as remove read and write access (including default access), for each role. This is completed using the System Console or the mmctl tool, either locally or remotely.

In the System Console

1. Go to System Console > User Management > System Roles then select the System Manager, User Manager, or Viewer role.

2. For each set of privileges, select the access level as Can edit, Read only, or No access.

Note: If you set privilege subsections to different access levels then the privilege access level displays as Mixed Access.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions add [role_name] [permission...]

To grant write access to the Authentication section of the System Console for all users with the User Manager role:

In the System Console

1. Go to System Console > User Management > System Roles then select the User Manager role.

2. Under Privileges > Authentication select Can edit, then select Save.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions add system_user_manager sysconsole_write_authentication

To grant read only access to the Authentication section of the System Console for all users with the User Manager role:

In the System Console

1. Go to System Console > User Management > System Roles then select the User Manager role.

2. Under Privileges > Authentication select Read only, then select Save.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions remove system_user_manager sysconsole_read_authentication

To remove write access to the Authentication section of the System Console for all users with the User Manager role:

In the System Console

1. Go to System Console > User Management > System Roles then select the User Manager role.

2. Under Privileges > Authentication select No access, then choose Save.

Using the mmctl tool

The format of the mmctl command is:

mmctl permissions remove system_user_manager sysconsole_write_authentication

To reset a role to its default set of permissions:

This is completed using the mmctl tool only, either locally or remotely.

The format of the mmctl command is:

mmctl permissions reset [role_name]

For example, to reset the permissions of the system_read_only_admin role:

mmctl permissions reset system_read_only_admin

Admin Roles and Privileges 

Roles

• system_manager

• system_user_manager

• system_read_only_admin

Privileges

Frequently Asked Questions