Skip to main content

User roles

Each user can perform actions based on the roles that are assigned to them in the organization. Each user is assigned one or more of the following roles.

When using XClarity One on premises, you can enable the View only toggle to give users read-only privileges, meaning that they can only view information. If this toggle is disabled, users can view information and perform actions on those resources.

Note
If a user belongs to one or more user groups, that user inherits roles that are assigned to each user group of which they are a member in addition to the roles that are assigned directly to that user. For more information about, see User groups.
Important
If you change roles for a user that is currently signed in, that user must sign out and then sign in again to see the correct privileges.

  • User administrator

    User administrators can perform the following actions.

    • Manage users in the organization, including inviting new users, resending invitations, assigning roles, resetting passwords and multifactor authentication, and enabling or disabling users

    • View and dismiss user-related todos

    • View and manage user groups and assign roles to user groups

    • View the external identity provider configuration

    An organization must have at least one active user administrator; however, at least two user administrators is highly recommended for redundancy and security.

  • Hub administrator

    Hub administrators can perform the following actions.

    • Manage hubs in the organization, including adding (connecting), removing (disconnecting), and enabling or disabling hubs

    • View devices that are discovered or managed by the hubs

    • Migrate devices from Lenovo XClarity Administrator

    • Manage todos, and jobs

  • Device administrator

    Device administrators can perform the following actions.

    • View hubs

    • Discover and manage devices

    • View managed devices in the organization, including viewing inventory and health, usage metrics, warranties

    • Power off and restart devices

    • (Cloud only) Remotely access the management controller and server console

    • Manage the repository of firmware, device setting configurations, and operating systems

    • Manage device-configuration templates, and deploy templates to devices

    • Deploy specific firmware, device setting configurations, and operating systems to devices

    • Manage device collections, and view health and usage metrics for the entire collection

    • Manage device-related events and alerts, todos, jobs, service tickets, and vulnerabilities for the device

    • Manage scheduled jobs

    • Manage external certificates for device

    • View data forwarders

    • Export data as a report

    • Collect and upload device service data to Lenovo Support

    • (On premises only) View and manage device service data

    • Manage Call Home configurations and contacts