Permissions Reference
- Print
- DarkLight
- PDF
Permissions Reference
- Print
- DarkLight
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback!
Access Control
| Permission | Description |
|---|---|
| View settings | Lets you access settings such as the users/roles in your organization, IP restrictions, and SAML settings, but does not let you make any changes to these settings. |
| Manage users | Lets you invite, disable/enable, or delete users, or change a user's roles. |
| Manage roles | Lets you create/delete roles, and edit existing roles. |
| Manage SSO access | Lets you configure SAML Single Sign On. Read How to Configure SAML Single SSO with Your IdP for details. |
| Manage Integrations | Lets you configure integrations in the DEX Platform global settings page. Read Integrations overview for details. |
| Manage login methods | Lets you configure the allowed login methods for your organization. Read Login Methods Overview for details. |
| Manage MFA | Lets you configure the allowed Multi-Factor Authentication methods for your organization. |
| Manage session timeout | Lets you configure the session timeout duration for your organization. |
| View Audit Log | Lets you view the DEX Platform Audit Log. Read Audit Logs for details. |
| Manage IP restrictions | Lets you configure IP restrictions. Read IP Restrictions for details. |
| Manage Default Home Page | Lets you configure the default home page. Read Set the Default Home Page for details. |
| TV Mode | Accounts with this permission ignore the session timeout duration and are never signed out due to inactivity. This can be useful for displaying dashboards on TVs for continuous monitoring. |
Employees
| Permission | Description |
|---|---|
| Access App Group AI | Lets you use ControlUp AI to suggest app groups. Read App groups for details |
| Access Employees | Lets you view the Employees dashboards and details pages. Read Employees View Overview for details. |
| Manage Experience Score Rules | Lets you configure Experience Score calculation settings. Read Experience Scores for details. |
Device Permissions
| Permission | Description |
|---|---|
| Run Command | Lets you use the Run Command action to execute a command on a device. |
| Send Message | Lets you send messages to devices. Read Send Messages for details |
| Power Actions | Lets you perform power actions on a device (Logoff user, Disconnect user, Reboot) |
| Terminate Process | Lets you terminate a process on a device. You can perform this action from the Active Processes tab when drilling down into the details for a specific device. |
| Run Ungrouped Scripts | Lets you run scripts in the permission group Ungrouped. Read Script permissions for details. |
| Run Group (1,2,3,4,5) Scripts | Lets you run scripts in the permission group Group (1,2,3,4,5). Read Script permissions for details. |
| Set Device Group | Lets you add or remove a device from a device group. Note that device groups can be used for RBAC. This means that changing a device's group can change who has access to that device. Read Organize Devices with Groups and Tags for details. |
| Set Device Tags | Lets you add or remove tags from a device. Note that device tags can be used for RBAC. This means that changing a device's tags can change who has access to that device. Read Organize Devices with Groups and Tags for details. |
| Configure Device Agent Settings | Lets you change the agent debugger level, toggle auto agent update, and save notes. These actions are performed when viewing the details for a specific device. |
| Delete Device | Lets you delete a device. Read Licensing for details. |
| Allow Remote Shell | Lets you start Remote Shell sessions. Read Remote Shell for details. |
| Do Not Audit Remote Shell Commands | If you have this permission, then the commands you run during a Remote Shell session are not recorded in the System Events log. Read Remote Shell for details. |
| Allow Remote Control | Lets you start Remote Control Sessions. Read Remote Control and Shadow for details. |
| Allow File Transfer | Lets you use two-way file transfer during Remote Control Sessions. Read Remote Control and Shadow for details. |
| Allow Elevated Command Shell | Lets you open an elevated cmd prompt during Remote Control Sessions. Read Remote Control and Shadow for details. |
| Allow Remote Shadow | Lets you start Remote Shadow sessions. Read Remote Control and Shadow for details. |
| Allow Remote Control and Remote Shadow without End User Consent | Lets you start Remote Control and Remote Shadow sessions without the end user of the device agreeing to a consent prompt. Read Remote Control and Shadow for details. |
| View Non-Security Events | Lets you view all events in the security events log except those with type = Security. Read Audit Logs for details. |
| View Security Events | Lets you view events in the security events log with type = Security. Read Audit Logs for details. |
| View, Create, Edit and Delete Alerts | Lets you view, create, edit, and delete alerts. Read Create Alerts for details. |
| View Scripts | Lets you view scripts that have been added to your organization. Read Scripting Guide for details. |
| View, Create, Edit and Delete Scripts | Lets you manage scripts in your organization, including adding new scripts. We recommend that you grant this permission only to senior administrators due to the inherent risk from adding and running custom scripts on your managed devices. Read Scripting Guide for details. |
| View Index Data | Lets you access all data indexes. |
| Read Indexes | Lets you view the total number of indexes, the total number of records, and the total GB stored. |
| Delete Indexes | Lets you delete a data index. Deleting a data index also deletes the contents of the index. |
| Prune Data | Lets you delete the contents of a data index. |
| View Custom Reports | Lets you view Custom Reports that other users in your organization have published. Read Create Custom Reports for details. |
| Create, Edit and Delete Custom Reports | Lets you create your own Custom Reports. Read Create Custom Reports for details. |
| Publish Custom Reports | Lets you publish your Custom Reports so that they can be viewed by other users in your organization. Read Create Custom Reports for details. |
| Create, Edit and Delete Filter Presets | Lets you create, edit, and delete your own private filter presets. Read Create and Share Filter Presets for details. |
| Publish Filter Presets | Lets you publish your filter presets so they can be used by all users in your organization. Read Create and Share Filter Presets for details. |
| Configure Production Agent Versions | Lets you configure which Agent versions are installed on devices. Read Agent Version Control for details. |
| Configure Agent Intervals | Lets you configure the duration for short and long trigger intervals. Read Time-based triggers for details. |
| Configure Agent Feature Settings | Lets you configure Windows Event Log Collection settings. Read Windows Event Logs for details. |
| Configure Auto Deletion of Old Devices | Lets you configure auto deletion of devices after they haven't connected to ControlUp for a specified duration. Read Licensing for details. |
| Configure Custom Settings | Lets you configure Custom Settings. Note that custom settings let you make many different types of changes to your tenant, and you should apply custom settings only if you are specifically instructed to do so. |
| Configure Device Dashboards Settings | Lets you access the Web Console settings page to configure stress level thresholds and to display or hide time gaps in dashboard charts. |
| Configure End User Activity Collection | Lets you configure End User Activity data collection. Read End User Activity for details. |
| Configure End User Activity Collection - Individual User Info | Lets you enable or disable the setting Collect Individual User Information in End User Activity settings. Read End User Activity for details. |
| Configure Extended Settings | Lets you configure Extended Settings. Read Extended Settings for details. |
| Configure Network Latency Targets | Lets you add custom latency targets. Read Network Performance for details. |
| Configure ServiceNow Connector | Lets you configure the ServiceNow connector to integrate ControlUp for Desktops Alerts with ServiceNow. Read ServiceNow Integration for details. |
| Configure Google Cloud Connector | Lets you configure the Google Cloud connector for additional ChromeOS data collection. Read ChromeOS Deployment for details. |
| License Assignment | Lets you use the License assignment feature to claim licenses. Read Licensing for details. |
| Show Agent Download Page | Lets you view the Agent downloads page to see your organization's device registration code and download the ControlUp for Desktops Agent. Read Agent Installation Overview for details. |
| Management Remote Control Settings | Lets you configure remote control/shadow auto-reconnect settings. Read Automatic reconnect for details. |
| View Reports with user privacy information | Lets you view the following reports:
|
| View End User Activity | Lets you view the End User Activity dashboard. Read End User Activity for details. |
| View Wi-Fi SSID and MAC | Lets you view view SSID and MAC address columns in reports. Note that you can still view the SSID and MAC address of a device outside of reports even if you don't have this permission. |
Sentiment
| Permission | Description |
|---|---|
| View, Create, Edit and Delete Templates | Lets you create, edit, and delete survey templates. Read Survey Library for details. |
| View, Create, Edit and Delete Surveys | Lets you create surveys, and edit/delete surveys that you have created. Read Publish and Distribute Surveys for details. |
| Edit and Delete Surveys owned by other users | Lets you edit or delete surveys that other users have created. Read Publish and Distribute Surveys for details. |
| View Results from other Users Surveys | Lets you view survey results from surveys that other users have published. Without this permission, you can only view results from surveys that you have created. |
| Send On Demand Surveys | Lets you manually perform an action to send a survey to a device. Read On Demand Surveys for details. |
| Configure Global Settings | Lets you configure settings that affect all of your surveys. Read Employee Sentiment Settings for details. |
Media Library
| Permission | Description |
|---|---|
| Upload, Edit and Delete items | Lets you upload, edit, or delete items to the Media library. Read Asset Library for details |
Unified Communications and Collaboration
| Permission | Description |
|---|---|
| UC&C Dashboards | Lets you view UC&C dashboards, call details, and reports. Read Explore Microsoft Teams Data or Explore Zoom Data for details. |
| View Zoom call topic | Lets you view the call topic of Zoom calls. |
| API Configuration | Lets you configure Microsoft Teams and Zoom integrations. Read Microsoft Teams Integration or Zoom Integration for details. |
VDI & DaaS
| Permissions | Description |
|---|---|
| Access Overview page | Lets you view the Overview page in the VDI & DaaS web UI. Read How to Access the VDI & DaaS Web UI for details. |
| Access Details page | Lets you view the Details page in the VDI & DaaS web UI. Read How to Access the VDI & DaaS Web UI for details. |
| Access Real-Time DX Console | Lets you sign in to the Real-Time DX console with your ControlUp account using the web-login feature. Read Sign into the Real-Time DX Console for details. |
Synthetic Monitoring
| Permission | Description |
|---|---|
| Admin | Lets you perform all actions in the Editor permission, plus configure daily digest, system notification emails, and API keys. |
| Editor | Lets you edit, or delete Scouts, Hives, and alert policies. Also lets you configure integrations, maintenance windows, and apply activation keys. |
| Viewer | Lets you view Scouts and Hives. |
API keys
VDI & DaaS APIs
In app.controlup.com, there is a permission category "VDI & DaaS APIs". These permissions aren't currently used and will be removed soon. For details about access to VDI & DaaS reports through the API, read the Reports section.
| Permission | Description |
|---|---|
| Manage API keys | Lets you create, revoke, or delete API keys. Read Create an API Key for details. |
Secure DX Management
Descriptions for Secure DX Management (ControlUp for Compliance) permissions are in progress.
Reports
| Permission | Description |
|---|---|
| Environment Assessment | Lets you view the Environment Assessment report. Read Environment Assessment for details. |
| Sizing Recommendations | Lets you view the Sizing Recommendations report. Read Sizing Recommendations Report for details. Lets you use the Get machine statistics for virtual environments and Get machine statistics for Azure environments API endpoints. |
| Session Count | Lets you view the Session Count report. Read Session Count Report for details. |
| Session Activity | Lets you view the Session Activity report. Read Session Activity Report for details. Lets you use the Get user activity status and Get session statistics API endpoints. |
| Logon Duration | Lets you view the Logon Duration report. Read Logon Duration Report for details |
| Protocol Trends | Lets you view the Protocol Trends report. Read Protocol Trends Report for details. |
| Machine Trends | Lets you view the Machine Trends report. Machine Trends Report for details. |
| Machine Statistics | Lets you view the Machine Statistics report. Read Machine Statistics Report for details. Lets you use the Get machine statistics API endpoint. |
| Host Trends | Lets you view the Host Trends report. Read Host Trends Report for details. |
| Host Statistics | Lets you view the Host Statistics report. Read Host Statistics Report for details. Lets you use the Get host metrics per folder and Get host counts API endpoints. |
| Top Windows Errors | Lets you view the Top Windows Errors report. Read Top Windows Errors Report for details. |
| NetScaler | Lets you view the NetScaler report. Read NetScaler Report for details. Lets you use the Get NetScaler metrics and Get NetScaler metrics with time series API endpoints. |
| Load Balancing | Lets you view the Load Balancing report. Read NetScaler Load Balancing Report for details. Lets you use the Get Load Balancer metrics and Get Load Balancer metrics with time series API endpoints. |
| Gateway | Lets you view the Gateway report. Read NetScaler Gateway Report for details. Lets you use the Get Gateway metrics and Get Gateway metrics with time series API endpoints. |
| Citrix License Usage | Lets you view the Citrix License Usage report. Read Citrix License Usage Report for details. |
| App Statistics | Lets you view the App Statistics report. Read App Statistics Report for details. Lets you use the Get application statistics API endpoint. |
| App Usage Details | Lets you view the App Usage Details report. Read App Usage Details Report for details. Lets you use the Get usage details for an application and Get usage details for all applications API endpoints. |
| App Trends | Lets you view the App Trends report. Read App Trends Report for details. |
| Published Apps | Lets you view the Published App Usage Details report. Read Published App Usage Details Report |
| Manage Personal Automated Reports | Lets you create and manage personal automated reports (only viewable by the user that created it). |
| Manage All Automated Reports | Lets you create and edit all automated reports. |
| Cost Savings Dashboard | Lets you view the Cost Savings dashboard. Read Cost Saving Dashboard for details. |
Chatbot
| Permission | Description |
|---|---|
| Access Chatbot | Lets you access and use ControlUp's AI Chatbot. |
Enrich
| Permission | Description |
|---|---|
| Manage Sites | Let's you configure the Enrich plugin. Read Configure Enrich Settings for details. |
ControlUp for Apps
| Permission | Description |
|---|---|
| Access ControlUp for Apps | Let's you view data from ControlUp for Apps. Read ControlUp for Apps Overview for details. |
| Configure ControlUp for Apps | Let's you configure ControlUp for Apps settings. Read Deploy ControlUp for Apps for details. |
Customer Success Hub
| Permission | Description |
|---|---|
| ControlUp Usage and Analytics | Let's you access the ControlUp Usage and Analytics section of the Customer Success Hub. This section contains analytics and statistics about you ControlUp organization including license consumption and user access. |
| My Success Hub | Let's you access the My Success Hub section of the Customer Success Hub. This section contains onboarding plans, important notifications, and information about your Customer Support tickets and Customer Success meetings. |
Was this article helpful?