{"id":2561,"date":"2025-07-02T12:44:34","date_gmt":"2025-07-02T12:44:34","guid":{"rendered":"https:\/\/zecurit.com\/help\/docs\/asset-manager\/settings\/access-permissions\/custom-role-permissions\/"},"modified":"2025-07-04T11:42:23","modified_gmt":"2025-07-04T11:42:23","slug":"custom-role-permissions","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/asset-management\/settings\/access-permissions\/custom-role-permissions\/","title":{"rendered":"Custom Role Permissions"},"content":{"rendered":"\n<p>Zecurit\u2019s <strong>Custom Role Permissions<\/strong> feature allows organizations to define tailored access control for different user types. This ensures users only access features relevant to their responsibilities \u2014 enhancing security and streamlining operations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who can manage custom roles?<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Action<\/th><th>Access Level<\/th><\/tr><\/thead><tbody><tr><td><strong>Create\/Edit\/Delete Roles<\/strong><\/td><td>\u2705 Super Admin only<\/td><\/tr><tr><td><strong>Assign Roles to Users<\/strong><\/td><td>\u2705 Admin &amp; Super Admin<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Only the <strong>Super Admin<\/strong> can create, modify, or delete custom roles. Once created, <strong>Admins and Super Admins<\/strong> can assign these roles while inviting or editing users.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Custom Role Creation<\/h2>\n\n\n\n<p>To create a custom role:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to <strong>Settings \u2192 Organization \u2192 Roles<\/strong><\/li>\n\n\n\n<li>Click <strong>Create Role<\/strong><\/li>\n\n\n\n<li>Provide a <strong>Role Name<\/strong> and an optional <strong>Description<\/strong><\/li>\n\n\n\n<li>Select <strong>permissions (Enable\/Disable)<\/strong> for each module and functionality:<\/li>\n<\/ol>\n\n\n\n<p>Below are the areas where access can be controlled when creating or editing a custom role:<\/p>\n\n\n\n<div class=\"wp-block-getwid-accordion has-icon-left\" data-active-element=\"none\">\n<div class=\"wp-block-getwid-accordion__header-wrapper\"><span class=\"wp-block-getwid-accordion__header\"><a href=\"#\"><span class=\"wp-block-getwid-accordion__header-title\"><strong>Enrollment<\/strong><\/span><span class=\"wp-block-getwid-accordion__icon is-active\"><i class=\"fas fa-plus\"><\/i><\/span><span class=\"wp-block-getwid-accordion__icon is-passive\"><i class=\"fas fa-minus\"><\/i><\/span><\/a><\/span><\/div><div class=\"wp-block-getwid-accordion__content-wrapper\"><div class=\"wp-block-getwid-accordion__content\">\n<p>Scan Device<\/p>\n\n\n\n<p>Schedule Scan<\/p>\n\n\n\n<p>Software License<\/p>\n\n\n\n<p>Software Category<\/p>\n\n\n\n<p>Geo Location<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-getwid-accordion__header-wrapper\"><span class=\"wp-block-getwid-accordion__header\"><a href=\"#\"><span class=\"wp-block-getwid-accordion__header-title\"><strong>Inventory<\/strong><\/span><span class=\"wp-block-getwid-accordion__icon is-active\"><i class=\"fas fa-plus\"><\/i><\/span><span class=\"wp-block-getwid-accordion__icon is-passive\"><i class=\"fas fa-minus\"><\/i><\/span><\/a><\/span><\/div><div class=\"wp-block-getwid-accordion__content-wrapper\"><div class=\"wp-block-getwid-accordion__content\">\n<p>Scan Device<\/p>\n\n\n\n<p>Schedule Scan<\/p>\n\n\n\n<p>Software License<\/p>\n\n\n\n<p>Software Category<\/p>\n\n\n\n<p>Geo Location<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-getwid-accordion__header-wrapper\"><span class=\"wp-block-getwid-accordion__header\"><a href=\"#\"><span class=\"wp-block-getwid-accordion__header-title\"><strong>Audit<\/strong><\/span><span class=\"wp-block-getwid-accordion__icon is-active\"><i class=\"fas fa-plus\"><\/i><\/span><span class=\"wp-block-getwid-accordion__icon is-passive\"><i class=\"fas fa-minus\"><\/i><\/span><\/a><\/span><\/div><div class=\"wp-block-getwid-accordion__content-wrapper\"><div class=\"wp-block-getwid-accordion__content\">\n<p>Alerts<\/p>\n\n\n\n<p>Activity Log<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-getwid-accordion__header-wrapper\"><span class=\"wp-block-getwid-accordion__header\"><a href=\"#\"><span class=\"wp-block-getwid-accordion__header-title\"><strong>Reports &amp; Analytics<\/strong><\/span><span class=\"wp-block-getwid-accordion__icon is-active\"><i class=\"fas fa-plus\"><\/i><\/span><span class=\"wp-block-getwid-accordion__icon is-passive\"><i class=\"fas fa-minus\"><\/i><\/span><\/a><\/span><\/div><div class=\"wp-block-getwid-accordion__content-wrapper\"><div class=\"wp-block-getwid-accordion__content\">\n<p>Reports Schedule<\/p>\n\n\n\n<p>Security Reports<\/p>\n\n\n\n<p>Hardware Reports<\/p>\n\n\n\n<p>Software Reports<\/p>\n\n\n\n<p>License Reports<\/p>\n\n\n\n<p>Certificate Reports<\/p>\n\n\n\n<p>User Logon Reports<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-getwid-accordion__header-wrapper\"><span class=\"wp-block-getwid-accordion__header\"><a href=\"#\"><span class=\"wp-block-getwid-accordion__header-title\"><strong>Settings<\/strong><\/span><span class=\"wp-block-getwid-accordion__icon is-active\"><i class=\"fas fa-plus\"><\/i><\/span><span class=\"wp-block-getwid-accordion__icon is-passive\"><i class=\"fas fa-minus\"><\/i><\/span><\/a><\/span><\/div><div class=\"wp-block-getwid-accordion__content-wrapper\"><div class=\"wp-block-getwid-accordion__content\">\n<p>User Management<\/p>\n\n\n\n<p>Roles<\/p>\n\n\n\n<p>Rebranding<\/p>\n\n\n\n<p>Groups<\/p>\n\n\n\n<p>2FA Settings<\/p>\n\n\n\n<p>IP Restriction<\/p>\n\n\n\n<p>Session Settings<\/p>\n\n\n\n<p>Agent Protection<\/p>\n\n\n\n<p>Data Cleanup Settings<\/p>\n<\/div><\/div>\n<\/div>\n\n\n\n<div style=\"height:32px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>Once saved, the role will appear in the list and can be assigned to users during invitation or modification.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Use Case Examples<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Software Manager Role:<\/strong> Grant access only to the Software License, Category and Deployment modules. This role is ideal for individuals solely responsible for managing software assets.<\/li>\n\n\n\n<li><strong>Security Analyst Role:<\/strong> Provide access exclusively to Alerts, Activity Logs and Security Reports. This ensures security personnel can monitor and investigate threats without access to unrelated system configurations.<\/li>\n\n\n\n<li><strong>Audit Viewer Role:<\/strong> Offer read-only visibility into reports and user activity. This is perfect for auditors who need to review data without the ability to make changes.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Best Practices<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use <strong>clear, descriptive role names<\/strong> (e.g., <em>Compliance Officer<\/em>, <em>Remote Technician<\/em>)<\/li>\n\n\n\n<li>Always follow the principle of least privilege. So assign <strong>minimal necessary access<\/strong> based on job roles.<\/li>\n\n\n\n<li>Review custom roles periodically as responsibilities evolve.<\/li>\n<\/ul>\n\n\n\n<p>Need help assigning roles to users? See the <a href=\"https:\/\/zecurit.com\/help\/docs\/asset-manager\/settings\/access-permissions\/user-role-management\/\">User &amp; Role Management<\/a> documentation.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":0,"parent":2552,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-2561","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=2561"}],"version-history":[{"count":8,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2561\/revisions"}],"predecessor-version":[{"id":2644,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2561\/revisions\/2644"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/2552"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=2561"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=2561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}