This article lists the permissions for each ControlUp product and capability, as well as the default roles they are assigned to. The default roles are: Admin, Editor, Viewer, VDI and Daas Admins, and Access Real-Time DX Console.
You can also create custom roles and assign them the specific permissions required for your organization. For more details, visit Set ControlUp Account Permissions.
Access Control
Permission | Description | Default Roles |
|---|---|---|
View settings | Access settings such as the users/roles in your organization, IP restrictions, and SAML settings, but does not let you make any changes to these settings. | Admin |
Manage users | Invite, disable/enable, or delete users, or change a user's roles. | Admin |
View users | View users and their roles | Admin |
Manage roles | Create/delete roles, and edit existing roles. | Admin |
Manage SSO access | Configure SAML Single Sign On. Read How to Configure SAML Single SSO with Your IdP for details. | Admin |
Manage Integrations | Configure integrations in the DEX Platform global settings page. Read Integrations overview for details. | Admin |
Manage login methods | Configure the allowed login methods for your organization. Read Login Methods Overview for details. | Admin |
Manage MFA | Configure the allowed Multi-Factor Authentication methods for your organization. | Admin |
Manage session timeout | Configure the session timeout duration for your organization. | Admin |
View Audit Log | View the DEX Platform Audit Log. Read Audit Logs for details. | Admin |
Manage IP restrictions | Configure IP restrictions. Read IP Restrictions for details. | Admin |
Manage Default Home Page | Configure the default home page. Read Set the Default Home Page for details. | Admin |
TV Mode | Accounts with this permission ignore the session timeout duration and are never signed out due to inactivity. This can be useful for displaying dashboards on TVs for continuous monitoring. | - - - |
Subscription
Permission | Description | Default Roles |
|---|---|---|
Manage Subscription | Manage your licensed products: activate your license, view its status, renewal dates and usage data, as well as extend or expand your license. Read Subscription Overview for details. | Admin |
Employees
Permission | Description | Default Roles |
|---|---|---|
Access App Group AI | Use ControlUp AI to suggest app groups. Read App groups for details | Admin |
Access Employees | View the Employees dashboards and details pages. Read Employees View Overview for details. | Admin, Editor, Viewer |
Manage Experience Score Rules | Vonfigure Experience Score calculation settings. Read Experience Scores for details. | Admin |
View Experience Score Rules | View the Experience Score calculation settings | Admin |
Device Permissions
Permission | Description | Default Roles |
|---|---|---|
Run Command | Use the Run Command action to execute a command on a device. | Admin, Editor |
Send Message | Send messages to devices. Read Send Messages for details | Admin, Editor |
Power Actions | Perform power actions on a device (Logoff user, Disconnect user, Reboot) | Admin, Editor |
Terminate Process | Terminate a process on a device. You can perform this action from the Active Processes tab when drilling down into the details for a specific device. | Admin, Editor |
Run Ungrouped Scripts | Run scripts in the permission group Ungrouped. Read Script permissions for details. | Admin, Editor |
Run Group (1,2,3,4,5) Scripts | Run scripts in the permission group Group (1,2,3,4,5). Read Script permissions for details. | Admin, Editor |
Set Device Group | Add or remove a device from a device group. Note that device groups can be used for RBAC. This means that changing a device's group can change who has access to that device. Read Organize Devices with Groups and Tags for details. | Admin, Editor |
Set Device Tags | Add or remove tags from a device. Note that device tags can be used for RBAC. This means that changing a device's tags can change who has access to that device. Read Organize Devices with Groups and Tags for details. | Admin, Editor |
Configure Device Agent Settings | Change the agent debugger level, toggle auto agent update, and save notes. These actions are performed when viewing the details for a specific device. | Admin, Editor |
Delete Device | Delete a device. Read Licensing for details. | Admin, Editor |
Allow Remote Shell | Start Remote Shell sessions. Read Remote Shell for details. | Admin, Editor |
Do Not Audit Remote Shell Commands | If you have this permission, then the commands you run during a Remote Shell session are not recorded in the System Events log. Read Remote Shell for details. | Admin, Editor |
Allow Remote Control | Start Remote Control Sessions. Read Remote Control and Shadow for details. | Admin, Editor |
Allow File Transfer | Use two-way file transfer during Remote Control Sessions. Read Remote Control and Shadow for details. | Admin, Editor |
Allow Elevated Command Shell | Open an elevated cmd prompt during Remote Control Sessions. Read Remote Control and Shadow for details. | Admin, Editor |
Allow Remote Shadow | Start Remote Shadow sessions. Read Remote Control and Shadow for details. | Admin, Editor |
Allow Remote Control and Remote Shadow without End User Consent | Start Remote Control and Remote Shadow sessions without the end user of the device agreeing to a consent prompt. Read Remote Control and Shadow for details. | Admin, Editor |
Allow remote control to unmanaged devices | Start a remote control session on unmanaged devices. Read Remote Control for Unmanaged Devices for details. | Admin |
Allow file transfer to unmanaged devices | Send and receive files during a remote control session on unmanaged devices. Read Remote Control for Unmanaged Devices for details. | Admin |
View Non-Security Events | View all events in the security events log except those with type = Security. Read Audit Logs for details. | Admin |
View Security Events | View events in the security events log with type = Security. Read Audit Logs for details. | Admin |
View, Create, Edit and Delete Alerts | View, create, edit, and delete alerts. Read Create Alerts for details. | Admin, Editor |
View and Configure ServiceNow Incidents | View and configure ServiceNow incidents. Read ServiceNow Integration for details. | Admin, Editor |
View Scripts | View scripts that have been added to your organization. Read Scripting Guide for details. | Admin, Editor |
View, Create, Edit and Delete Scripts | Manage scripts in your organization, including adding new scripts. We recommend that you grant this permission only to senior administrators due to the inherent risk from adding and running custom scripts on your managed devices. Read Scripting Guide for details. | Admin, Editor |
View Index Data | Access all data indexes. | Admin, Editor |
Read Indexes | View the total number of indexes, the total number of records, and the total GB stored. | Admin, Editor |
Delete Indexes | Delete a data index. Deleting a data index also deletes the contents of the index. | Admin, Editor |
Prune Data | Delete the contents of a data index. | Admin, Editor |
View Custom Reports | View Custom Reports that other users in your organization have published. Read Create Custom Reports for details. | Admin, Editor |
Create, Edit and Delete Custom Reports | Create your own Custom Reports. Read Create Custom Reports for details. | Admin, Editor |
Publish Custom Reports | Publish your Custom Reports so that they can be viewed by other users in your organization. Read Create Custom Reports for details. | Admin, Editor |
Create, Edit and Delete Filter Presets | Create, edit, and delete your own private filter presets. Read Create and Share Filter Presets for details. | Admin, Editor |
Publish Filter Presets | Publish your filter presets so they can be used by all users in your organization. Read Create and Share Filter Presets for details. | Admin, Editor |
Allow Export to CSV | Export data to CSV | Admin, Editor |
Configure Production Agent Versions | Configure which Agent versions are installed on devices. Read Agent Version Control for details. | Admin, Editor |
Configure Agent Intervals | Configure the duration for short and long trigger intervals. Read Time-based triggers for details. | Admin, Editor |
Configure Agent Feature Settings | Configure Windows Event Log Collection settings. Read Windows Event Logs for details. | Admin, Editor |
Configure Auto Deletion of Old Devices | Configure auto deletion of devices after they haven't connected to ControlUp for a specified duration. Read Licensing for details. | Admin, Editor |
Configure Custom Settings | Configure Custom Settings. Note that custom settings let you make many different types of changes to your tenant, and you should apply custom settings only if you are specifically instructed to do so. | Admin, Editor |
Configure Device Dashboards Settings | Access the Web Console settings page to configure stress level thresholds and to display or hide time gaps in dashboard charts. | Admin, Editor |
Configure End User Activity Collection | Configure End User Activity data collection. Read End User Activity for details. | Admin, Editor |
Configure End User Activity Collection - Individual User Info | Enable or disable the setting Collect Individual User Information in End User Activity settings. Read End User Activity for details. | Admin, Editor |
Configure Extended Settings | Configure Extended Settings. Read Extended Settings for details. | Admin |
Configure Network Latency Targets | Add custom latency targets. Read Network Performance for details. | Admin, Editor |
Configure ServiceNow Connector | Configure the ServiceNow connector to integrate ControlUp for Desktops Alerts with ServiceNow. Read ServiceNow Integration for details. | Admin, Editor |
View and Configure ServiceNow Incidents | Use the ServiceNow integration’s features in ControlUp, such as viewing ServiceNow widgets and configuring an Alert to create a ServiceNow ticket. Read ServiceNow Integration for details. | Admin, Editor |
Configure Google Cloud Connector | Configure the Google Cloud connector for additional ChromeOS data collection. Read ChromeOS Deployment for details. | Admin, Editor |
Configure Sustainability Integration Settings | Configure the Sustainability Integration settings required for creating sustainability reports. Read Sustainability and Carbon Footprint Report for details. | Admin |
License Assignment | Use the License assignment feature to claim licenses. Read Licensing for details. | Admin |
Show Agent Download Page | View the Agent downloads page to see your organization's device registration code and download the ControlUp for Desktops Agent. Read Agent Installation Overview for details. | Admin |
Management Remote Control Settings | Configure remote control/shadow auto-reconnect settings. Read Automatic reconnect for details. | Admin |
View Reports with user privacy information | View the following reports:
View the Device Events tab when viewing the details for a specific device (if you also have either the 'View Non-Security Events' or 'View Security Events' permission). | Admin, Editor |
View End User Activity | View the End User Activity dashboard. Read End User Activity for details. | Admin, Editor |
View Wi-Fi SSID and MAC | View view SSID and MAC address columns in reports. Note that you can still view the SSID and MAC address of a device outside of reports even if you don't have this permission. | Admin, Editor |
Sentiment
Permission | Description | Default Roles |
|---|---|---|
View, Create, Edit and Delete Templates | Create, edit, and delete survey templates. Read Survey Library for details. | Admin |
View, Create, Edit and Delete Surveys | Create surveys, and edit/delete surveys that you have created. Read Publish and Distribute Surveys for details. | Admin, Editor |
Edit and Delete Surveys owned by other users | Edit or delete surveys that other users have created. Read Publish and Distribute Surveys for details. | Admin, Editor |
View Results from other Users Surveys | View survey results from surveys that other users have published. Without this permission, you can only view results from surveys that you have created. | Admin, Editor |
Send On Demand Surveys | Manually perform an action to send a survey to a device. Read On Demand Surveys for details. | Admin |
Configure Global Settings | Configure settings that affect all of your surveys. Read Employee Sentiment Settings for details. | Admin |
Media Library
Permission | Description | Default Roles |
|---|---|---|
Upload, Edit and Delete items | Upload, edit, or delete items to the Media library. Read Asset Library for details | Admin |
Unified Communications and Collaboration
Permission | Description | Default Roles |
|---|---|---|
UC&C Dashboards | View UC&C dashboards, call details, and reports. Read Explore Microsoft Teams Data or Explore Zoom Data for details. | Admin, Editor, Viewer |
View Zoom call topic | View the call topic of Zoom calls. | Admin, Editor, Viewer |
API Configuration | Configure Microsoft Teams and Zoom integrations. Read Microsoft Teams Integration or Zoom Integration for details. | Admin |
VDI & DaaS
Permission | Description | Default Roles |
|---|---|---|
Access Overview page | View the Overview page in the VDI & DaaS web UI. Read How to Access the VDI & DaaS Web UI for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Access Details page | View the Details page in the VDI & DaaS web UI. Read How to Access the VDI & DaaS Web UI for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Access Real-Time DX Console | Sign in to the Real-Time DX console with your ControlUp account using the web-login feature. Read Sign into the Real-Time DX Console for details. | Admin, VDI and DaaS Admins |
Synthetic Monitoring
Permission | Description | Default Roles |
|---|---|---|
Edit and configure | Perform all actions in the Editor permission, plus configure daily digest, system notification emails, and API keys. | Admin |
Edit | Edit, or delete Scouts, Hives, and alert policies. Also configure integrations, maintenance windows, and apply activation keys. | Editor |
View | View Scouts and Hives. | Viewer |
API keys
VDI & DaaS APIs
In app.controlup.com, there is a permission category "VDI & DaaS APIs". These permissions aren't currently used and will be removed soon. For details about access to VDI & DaaS reports through the API, read the Reports section.
Permission | Description | Default Roles |
|---|---|---|
Manage API keys | Create, revoke, or delete API keys. Read Create an API Key for details. | Admin |
Secure DX Management
Descriptions for Secure DX Management (ControlUp for Compliance) permissions are in progress.
Reports
Permission | Description | Default Roles |
|---|---|---|
Environment Assessment | View the Environment Assessment report. Read Environment Assessment for details. | Admin, Editor. Viewer, VDI and DaaS Admins |
Sizing Recommendations | View the Sizing Recommendations report. Read Sizing Recommendations Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Session Count | View the Session Count report. Read Session Count Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Session Activity | View the Session Activity report. Read Session Activity Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Logon Duration | View the Logon Duration report. Read Logon Duration Report for details | Admin, Editor, Viewer, VDI and DaaS Admins |
Protocol Trends | View the Protocol Trends report. Read Protocol Trends Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Machine Trends | View the Machine Trends report. Machine Trends Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Machine Statistics | View the Machine Statistics report. Read Machine Statistics Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Host Trends | View the Host Trends report. Read Host Trends Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Host Statistics | View the Host Statistics report. Read Host Statistics Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Top Windows Errors | View the Top Windows Errors report. Read Top Windows Errors Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
NetScaler | View the NetScaler report. Read NetScaler Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Load Balancing | View the Load Balancing report. Read NetScaler Load Balancing Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Gateway | View the Gateway report. Read NetScaler Gateway Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Citrix License Usage | View the Citrix License Usage report. Read Citrix License Usage Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
App Statistics | View the App Statistics report. Read App Statistics Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
App Usage Details | View the App Usage Details report. Read App Usage Details Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
App Trends | View the App Trends report. Read App Trends Report for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Published Apps | View the Published App Usage Details report. Read Published App Usage Details Report | Admin, VDI and Daas Admins |
Manage Personal Automated Reports | Create and manage personal automated reports (only viewable by the user that created it). | Admin, Editor, VDI and Daas Admins |
Manage All Automated Reports | Create and edit all automated reports. | Admin, VDI and Daas Admins |
Cost Savings Dashboard | View the Cost Savings dashboard. Read Cost Saving Dashboard for details. | Admin, Editor, Viewer, VDI and DaaS Admins |
Enrich
Permission | Description | Default Roles |
|---|---|---|
Manage Sites | Configure the Enrich plugin. Read Configure Enrich Settings for details. | Admin |
ControlUp for Apps
Permission | Description | Default Roles |
|---|---|---|
Access ControlUp for Apps | View data from ControlUp for Apps. Read ControlUp for Apps Overview for details. | Admin, Editor, Viewer |
Configure ControlUp for Apps | Configure ControlUp for Apps settings. Read Deploy ControlUp for Apps for details. | Admin |
Workflows
Permission | Description | Default Roles |
|---|---|---|
View flows | View flow widgets, details, templates and integrations. Read Workflows Overview and Features for details. | Admin, Editor, Viewer |
Create new flows | Create new flows. Read Create a Flow for details. | Admin |
Edit existing flows | Edit existing flows. Read Create a Flow for details. | Admin, Editor |
Delete flows | Delete flows. Read Create a Flow for details. | Admin |
Enable/disable flows | Enable or disable flows. Read Create a flow for details. | Admin |
View integrations | View the available integrations for workflows. Read Workflow Integrations for details. | Admin, Editor, Viewer |
Configure new integration connections | Configure new integrations. Read Workflow Integrations for details. | Admin |
Edit integration settings | Edit the settings of each integration. Read Workflow Integrations for details. | Admin, Editor |
Delete integration connections | Delete integrations. Read Workflow Integrations for details. | Admin |
Create API keys | Create API keys for flows. | Admin |
Delete API keys | Delete API keys for flows. | Admin |
View forms | View existing forms. | Admin, Editor, Viewer |
Create new forms | Create new forms. See Forms for details. | Admin |
Edit existing forms | Edit existing forms. | Admin, Editor |
Delete forms | Delete existing forms. | Admin |
Customer Success Hub
Permission | Description | Default Roles |
|---|---|---|
ControlUp Usage and Analytics | Access the ControlUp Usage and Analytics section of the Customer Success Hub. This section contains analytics and statistics about you ControlUp organization including license consumption and user access. | Admin |
My Success Hub | Access the My Success Hub section of the Customer Success Hub. This section contains onboarding plans, important notifications, and information about your Customer Support tickets and Customer Success meetings. | Admin |
Events & Alert Management
Permission | Description | Default Roles |
|---|---|---|
View Desktop Events | View Desktops event data on the ControlUp Events Dashboard. Read ControlUp Events Dashboard for details. | Admin, Editor, Viewer |
View VDI Events | View VDI event data on the ControlUp Events Dashboard. Read ControlUp Events Dashboard for details. | Admin, Editor, Viewer |
View Synthetic Monitoring Events | View Synthetic Monitoring event data on the ControlUp Events Dashboard. Read ControlUp Events Dashboard for details. | Admin, Editor, Viewer |
| Reorder, delete or reset event columns for Desktops events on the ControlUp Events Dashboard. Read Edit event columns for details. | Admin, Editor |
Edit VDI Events | Reorder, delete or reset event columns for VDI events on the ControlUp Events Dashboard. Read Edit event columns for details. | Admin, Editor |
Edit Synthetic Monitoring Events | Reorder, delete or reset event columns for Synthetic Monitoring events on the ControlUp Events Dashboard. Read Edit event columns for details. | Admin, Editor |
View Desktop Alerts Configuration | ||
Create, Edit & Delete Desktop Alerts Configuration |
Dashboards
Permission | Description | Default Roles |
|---|---|---|
View Dashboards | View your personal dashboards and shared dashboards (organizational and ControlUp dashboards) | Admin, Editor, Viewer |
Edit Dashboards | Create and edit your personal dashboards | Admin, Editor |
Edit Organizational Dashboards | Create and edit personal dashboards, edit organizational dashboards, share dashboards with your org, unshare dashboards, view and duplicate ControlUp dashboards | Admin, Editor, Organizational Editor |
Tenant Manager
Permission | Description | Default Roles |
|---|---|---|
Add Tenant | Add a tenant to your Tenant Manager organization | Admin |
Edit License | Manage your Tenant Manager subscription, manage tenants, and edit their licenses | Admin |