Default Roles

This page displays the permissions included for each default role in Orchestrator.

You can view and edit the permissions for each role from the Roles page by clicking the More Actions icon on the right end of a row.

Administrator Role

It includes the following rights, which cannot be changed.

This is a mixed role and includes both tenant and folder permissions. With mixed roles, for a global operation, only the user's tenant permissions are taken into consideration; for a folder-specific operation, if a custom role is defined, folder permissions are applied in favor of any tenant permissions present.

Tenant permissions

Folder permissions

The admin account

In a fresh Orchestrator installation, there is only one predefined account: admin.

You cannot change the user name, and cannot delete this account.

The admin user account has the Administrator role assigned to it by default, but you can assign additional roles to it if needed.

Robot Role

By default, the role has the following rights, which can be edited.

This is a mixed role and includes both tenant and folder permissions.With mixed roles, for a global operation, only the user's tenant permissions are taken into consideration; for a folder-specific operation, if a custom role is defined, folder permissions are applied in favor of any tenant permissions present.

Note: As robot accounts can write logs without the explicit assignment of the Create permission on Logs, Orchestrator skips the check on this permission.

Tenant permissions

Folder permissions

Personal Workspace Administrator Role

This is a folder role and it includes the following rights by default, which cannot be edited.

Standard Roles for Modern Folders

The following roles are pre-configured to manage permissions at the tenant level and at the folder level, which is required to work in modern folders.

They are only available if you choose to create them for your tenant from Tenant > Settings > General.

Tenant Administrator

This is a tenant role and includes the following rights by default, but they can be edited.

Allow to Be Folder Administrator

This is a tenant role and includes the following permissions by default, but they can be edited.

Folder Administrator

This is a folder role and includes the following permissions by default, but they can be edited.

Allow to Be Automation User

This is a tenant role and includes the following permissions by default, but they can be edited.

Automation User

This is a folder role and includes the following permissions by default, but they can be edited.