Available admin roles and their respective rights

Cortado Support

Modified on: Wed, 24 Nov, 2021 at 12:07 PM

The Cortado server offers you the option to deploy additional administrators with differing rights. As well as the CortadoService account, which has all rights, you can create other admin accounts that can only make changes in certain areas (e.g. in user management, or in the apps). In addition, an admin account can be created that has reading rights only.

Open in the management console Control Panel→ Global Settings→ Admin Roles. The following roles are available:

Read-Only-Admin
Support-Admin
Application-Admin
MDM-Admin
User-Admin

Global Settings: Admin Roles

The Cortado server admin has full access in all areas (write and read rights).
Read-Only admin has read rights in all areas
All admin roles have right and read rights Reports.

Here you can find an overview of the individual rights for admin roles in the Group Templates, Users, Devices, Policies, Profiles and Apps & Docs:

Group Templates

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Actions Add	•
Remove	•
Get settings	•
Edit	•
Set priority	•
Priority down	•
Priority up	•
Fast enrollment	•
Rollout	•
Remove settings	•
Assign Android Enterprise	•
Unassign Android Enterprise	•
Settings Edit	•				•
Rollout	•				•
Network Drives Add	•				•
Edit	•				•
Remove	•				•
Rollout	•				•
Printers Add	•				•
Rename	•
Remove	•				•
Rollout	•				•
Policies Assign	•			•
Unassign	•			•
Rollout	•			•
Profiles Assign	•			•
Unassign	•			•
Rollout	•			•
Apps & Docs Assign	•		•
Unassign	•		•
Rollout	•		•
Blacklisted Apps Add	•		•
Edit	•		•
Remove	•		•
Rollout	•		•

Users

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Actions Add	•				•
Remove	•				•
Send email	•	•			•
Get settings	•				•
Fast Enrollment	•				•
Remove entity	•				•
Assign Android Enterprise	•
Unassign Android Enterprise	•
Change project owner	•				•
Settings Edit	•				•
Network drives Add	•	•			•
Edit	•	•			•
Remove	•	•			•
Printers Add	•	•			•
Remove	•	•			•
Rename	•	•			•
Devices Remove	•			•
Lock screen	•	•		•
Clear passcode	•	•		•
Wipe full	•	•		•
Wipe partial	•	•		•
Merge	•	•		•
Locate	•	•		•
Lock Cortado app	•	•		•
Unlock Cortado app	•	•		•
Activate device	•			•
Unlock device	•			•
Change device name	•	•		•
Enable lost mode	•	•		•
Disable lost mode	•	•		•
Request device location	•	•		•
Certificates Remove	•
New	•
Personal Printing Edit	•	•			•
Policies Assign	•	•		•
Unassign	•	•		•
Profiles Assign	•	•		•
Unassign	•	•		•
Apps & Docs Assign	•	•	•
Unassign	•	•	•
Add VPP account	•	•	•
Refresh	•	•	•
Remove VPP account	•	•	•
Blacklisted Apps Add	•		•
Edit	•		•
Remove	•		•

Devices

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Actions Remove	•			•
Lock screen	•	•		•
Clear passcode	•	•		•
Wipe full	•	•		•
Wipe partial	•	•		•
Locate	•	•		•
Merge	•	•		•
Lock Cortado app	•	•		•
Unlock Cortado app	•	•		•
Activate device	•			•
Unlock device	•			•
Change device name	•	•		•
Enable lost mode	•	•		•
Disable lost mode	•	•		•
Request device location	•	•		•
Details Refresh	•	•	•	•	•	•
Add comment	•			•
Apps & Docs Refresh	•	•	•	•	•	•
Policies Assign	•	•		•
Unassign	•	•		•
Certificates Remove	•
New	•
Profiles Assign	•	•		•
Unassign	•	•		•
MDM States Filter	•	•		•
Remove	•	•		•

Policies

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Actions Add	•			•
Assign	•	•		•
Unassign	•	•		•
Edit	•			•
Remove	•			•

Profils

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Actions Add	•			•
Assign	•	•		•
Unassign	•	•		•
Edit	•			•
Remove	•			•

Apps & Docs

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Actions Add	•		•
Assign	•	•	•
Unassign	•	•	•
Edit	•		•
Remove	•		•
Rollout on assigned users	•	•	•
Retry failed rollout	•	•	•
Details Configure – Edit Permissions	•
Blacklisted Apps Add	•		•
Edit	•		•
Remove	•		•
VPP Accounts Add	•		•
Edit	•		•
Remove	•		•
Refresh	•		•
Assign Users (nur Apple)	•	•	•
Unassign Users (nur Apple)	•	•	•
Renew certificate for VPP	•
Managed Configurations Add	•		•
Edit	•		•
Remove	•		•
Sync	•		•
Assign	•	•	•
Unassign	•	•	•

Certificates

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Server Certificate Generate Root Certificate	•
Import Root Certificate	•
Export Root Certificate	•
Generate Server Certificate	•
Import Server Certificate	•
Export Server Certificate	•
Apple Push Certificate Generate Certificate Request	•
Renew Apple Push Certificate	•
Export Apple Push Certificate	•
Import Apple Push Certificate	•
Certificate Mode Change Certificate Mode	•
Renew Configuration Files	•

Reporting

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Filter data	•	•	•	•	•	•

Global Settings

	Server-Admin	Support-Admin	App-Admin	MDM-Admin	User-Admin	Read-Only-Admin
Details	•	•	•	•	•	•
Mail Configure	•
Mail server settings tab	•		•	•	•
Email settings tab	•		•	•	•
MDM Configure	•
DEP Download	•			•
Renew	•			•
Import	•			•
Add	•			•
Edit	•			•
Remove	•			•
Admin Roles Add	•
Remove	•
User Logon Configure	•
Synchronization Configure	•
Clean up database	•
Diagnostics Manage Services	•
Filter log entries	•
Export event logs	•
Delete log entries	•
Proxy Configure	•
Sharing Configure	•

English