User Roles and Permissions

Overview

Use this page to confirm what each Device Management role can view or manage.

It is useful for administrators who assign access and for users who need to understand missing menus or actions.

Check access before you investigate

1. Confirm the user's assigned role.
2. Confirm the active tenant, hierarchy, or group.
3. Compare the required action with the role details below.

If the action remains unavailable, contact an Estate Owner Admin. Include the user, active context, and missing action.

Device Management Roles

• Estate Owner Admin has the broadest access across devices, rollouts, administration, software, and reports.
• Reseller Manager has broad operational access, but not full administration or software management access.
• Merchant Admin can monitor devices, export selected data, and use reporting features.
• Merchant Supervisor has similar visibility to Merchant Admin with limited action access.
• Merchant User mainly has view access with selected reporting and alert export access.

This page shows role-based access. Actual visibility can also depend on the tenant, hierarchy, or group assigned to the user.

Choose the right role

• Use Estate Owner Admin for estate-wide administration and software management.
• Use Reseller Manager for broad operations without full administration access.
• Use a Merchant role for visibility and reporting within its assigned scope.

Do not assign a broader role only to solve a context issue. Check the user's tenant, hierarchy, and group assignments first.

* The Shipment checkbox and Device Inspection window are available only to Estate Owner Admin and Reseller Manager.

Role	Permission	Rights
Estate Owner Admin	Home and dashboard	View the home screen, notifications, dashboard KPIs, and dashboard charts.
	Device search	View device search. Configure devices. Change status. Export devices, device metadata, and VRK certificates. Enable or disable automation. Assign software.
	Device details	View device details. Clone, delete, and move devices. Move devices to the Estate Owner Pool. Enable or manage automation. Set log level. Download schedules for software and parameters, content, and diagnostics. Assign software. Change status. Swap devices and generate reports. Access File Chain of Custody*. View Asset Lifecycle, Key Indicators, Profile table, Details table, History table, and Jobs table.
	Devices and rollouts	View deleted devices. Undelete or delete devices permanently. View rollouts. Create a new rollout. Create a new batch. Edit a batch. Cancel a job.
	Administration	View, add, edit, and delete tenants. Access Reference Set and Parameter Template. Access Content Files. View, add, edit, and delete locations. View groups. Add, edit, delete, unassign, and export groups. View alerts. Add notes, close alerts, and export alerts. Update hierarchies. View and edit alert configuration. View and edit alert subscriptions. View and edit system configurations. View sponsors and add sponsors. View and add key handles.
	Software and reports	View the Software Library. Add, edit, and delete software entries. Upload or download Parameters zip files. Configure parameters. Import parameter templates. View Reference Sets. Add, edit, delete, copy, lock, and unlock Reference Sets. View Standard Reports. View Chain of Custody reports. View Device Asset Tracking reports.
Reseller Manager	Home and dashboard	View the home screen, notifications, dashboard KPIs, and dashboard charts.
	Device search	View device search. Configure devices. Change status. Export devices, device metadata, and VRK certificates. Enable or disable automation. Assign software.
	Device details	View device details. Clone, delete, and move devices. Move devices to the Estate Owner Pool. Enable or manage automation. Set log level. Download schedules for software and parameters, content, and diagnostics. Assign software. Change status. Swap devices and generate reports. Access File Chain of Custody*. View Asset Lifecycle, Key Indicators, Profile table, Details table, History table, and Jobs table.
	Devices and rollouts	View deleted devices. Undelete or delete devices permanently. View rollouts. Create a new rollout. Create a new batch. Edit a batch. Cancel a job.
	Administration	View groups. Add, edit, delete, unassign, and export groups. View alerts and export alerts. Update hierarchies.
	Reports	View Chain of Custody reports. View Device Asset Tracking reports.
Merchant Admin	Home and dashboard	View the home screen, notifications, dashboard KPIs, and dashboard charts.
	Device search	View device search. Export devices, device metadata, and VRK certificates.
	Device details	View device details. Swap devices and generate reports. Access File Chain of Custody*. View Asset Lifecycle, Key Indicators, Profile table, Details table, History table, and Jobs table.
	Devices and rollouts	View deleted devices. View rollouts.
	Administration	View groups and export groups. View alerts and export alerts.
	Reports	View Chain of Custody reports. View Device Asset Tracking reports.
Merchant Supervisor	Home and dashboard	View the home screen, notifications, dashboard KPIs, and dashboard charts.
	Device search	View device search. Export devices, device metadata, and VRK certificates.
	Device details	View device details. Swap devices and generate reports. Access File Chain of Custody*. View Asset Lifecycle, Key Indicators, Profile table, Details table, History table, and Jobs table.
	Devices and rollouts	View deleted devices. View rollouts.
	Administration	View groups and export groups. View alerts and export alerts.
	Reports	View Chain of Custody reports. View Device Asset Tracking reports.
Merchant User	Home and dashboard	View the home screen, notifications, dashboard KPIs, and dashboard charts.
	Device search	View device search.
	Device details	View device details. Swap devices and generate reports. Access File Chain of Custody*. View Asset Lifecycle, Key Indicators, Profile table, Details table, History table, and Jobs table.
	Devices and rollouts	View deleted devices. View rollouts.
	Administration	View groups. View alerts and export alerts.
	Reports	View Chain of Custody reports. View Device Asset Tracking reports.

Related pages

• Tenants
• Manage groups
• Hierarchy - user management