Default administrator roles in the cloud console

The cloud console includes multiple default administrator roles, each of which provides a unique set of privileges. The default roles cannot be edited or deleted, but custom roles can be created if needed.

Creating and managing custom roles

The cloud console includes the following default roles:

Super Administrator	Create, edit, and delete all resources in all domains. Super Administrators are only visible in the domain that you created them in.
Domain Administrator	Create, edit, and delete all resources in a single domain.
Limited Administrator	Create and edit all resources in a single domain.
Viewer	Read-only access to all resources in a single domain.

Among other privileges, a Super Administrator can:

Request product trials^*

Create other administrator accounts

Change administrator roles

Create, rename or delete a domain

Create custom roles

View and manage multiple domains

*Domain and Limited Administrator roles can request trials only when they were explicitly given access to the Testpad domain.

Default role privileges

Area	Privileges	Task	Super Administrator	Domain Administrator	Limited Administrator	Viewer
Devices	Group Management	Create and edit	√	√	√
		Delete	√	√
	Commands	Run LiveUpdate	√	√
		Quick Scan and Full Scan	√	√
		Quarantine/ Unquarantine	√	√
		Reboot	√	√
		Lock and rollback engine	√	√
Alerts & events	Alerts and Event rules management	View	√	√	√	√
Policy Management	Policy Management	Create and edit	√	√	√
		Delete	√	√
		View	√	√	√	√
	Policy Targeting	Target on Asset groups	√	√	√
	Policy Group Management	Create and edit	√	√	√
		Delete	√	√
Policy management	Symantec Endpoint Protection Manager enrollment	Enroll new sites	√	√	√

Changing the role that is assigned to an administrator account

Creating an administrator account

Administrators, Passwords, and Authentication

Symantec Endpoint Security

Default administrator roles in the cloud console