Permissions Reference

View settings

Lets you access settings such as the users/roles in your organization, IP restrictions, and SAML settings, but does not let you make any changes to these settings.

Admin

Manage users

Lets you invite, disable/enable, or delete users, or change a user's roles.

Admin

View users

Lets you view users and their roles

Admin

Manage roles

Lets you create/delete roles, and edit existing roles.

Admin

Manage SSO access

Lets you configure SAML Single Sign On. Read How to Configure SAML Single SSO with Your IdP for details.

Admin

Manage Integrations

Lets you configure integrations in the DEX Platform global settings page. Read Integrations overview for details.

Admin

Manage login methods

Lets you configure the allowed login methods for your organization. Read Login Methods Overview for details.

Admin

Manage MFA

Lets you configure the allowed Multi-Factor Authentication methods for your organization.

Admin

Manage session timeout

Lets you configure the session timeout duration for your organization.

Admin

View Audit Log

Lets you view the DEX Platform Audit Log. Read Audit Logs for details.

Admin

Manage IP restrictions

Lets you configure IP restrictions. Read IP Restrictions for details.

Admin

Manage Default Home Page

Lets you configure the default home page. Read Set the Default Home Page for details.

Admin

TV Mode

Accounts with this permission ignore the session timeout duration and are never signed out due to inactivity. This can be useful for displaying dashboards on TVs for continuous monitoring.

- - -

Manage Subscription

Lets you manage your licensed products: activate your license, view its status, renewal dates and usage data, as well as extend or expand your license. Read Subscription Overview for details.

Admin

Access App Group AI

Lets you use ControlUp AI to suggest app groups. Read App groups for details

Admin

Access Employees

Lets you view the Employees dashboards and details pages. Read Employees View Overview for details.

Admin, Editor, Viewer

Manage Experience Score Rules

Lets you configure Experience Score calculation settings. Read Experience Scores for details.

Admin

View Experience Score Rules

Lets you view the Experience Score calculation settings

Admin

Run Command

Lets you use the Run Command action to execute a command on a device.

Admin, Editor

Send Message

Lets you send messages to devices. Read Send Messages for details

Admin, Editor

Power Actions

Lets you perform power actions on a device (Logoff user, Disconnect user, Reboot)

Admin, Editor

Terminate Process

Lets you terminate a process on a device. You can perform this action from the Active Processes tab when drilling down into the details for a specific device.

Admin, Editor

Run Ungrouped Scripts

Lets you run scripts in the permission group Ungrouped. Read Script permissions for details.

Admin, Editor

Run Group (1,2,3,4,5) Scripts

Lets you run scripts in the permission group Group (1,2,3,4,5). Read Script permissions for details.

Admin, Editor

Set Device Group

Lets you add or remove a device from a device group. Note that device groups can be used for RBAC. This means that changing a device's group can change who has access to that device. Read Organize Devices with Groups and Tags for details.

Admin, Editor

Set Device Tags

Lets you add or remove tags from a device. Note that device tags can be used for RBAC. This means that changing a device's tags can change who has access to that device. Read Organize Devices with Groups and Tags for details.

Admin, Editor

Configure Device Agent Settings

Lets you change the agent debugger level, toggle auto agent update, and save notes. These actions are performed when viewing the details for a specific device.

Admin, Editor

Delete Device

Lets you delete a device. Read Licensing for details.

Admin, Editor

Allow Remote Shell

Lets you start Remote Shell sessions. Read Remote Shell for details.

Admin, Editor

Do Not Audit Remote Shell Commands

If you have this permission, then the commands you run during a Remote Shell session are not recorded in the System Events log. Read Remote Shell for details.

Admin, Editor

Allow Remote Control

Lets you start Remote Control Sessions. Read Remote Control and Shadow for details.

Admin, Editor

Allow File Transfer

Lets you use two-way file transfer during Remote Control Sessions. Read Remote Control and Shadow for details.

Admin, Editor

Allow Elevated Command Shell

Lets you open an elevated cmd prompt during Remote Control Sessions. Read Remote Control and Shadow for details.

Admin, Editor

Allow Remote Shadow

Lets you start Remote Shadow sessions. Read Remote Control and Shadow for details.

Admin, Editor

Allow Remote Control and Remote Shadow without End User Consent

Lets you start Remote Control and Remote Shadow sessions without the end user of the device agreeing to a consent prompt. Read Remote Control and Shadow for details.

Admin, Editor

Allow remote control to unmanaged devices

Lets you start a remote control session on unmanaged devices. Read Remote Control for Unmanaged Devices for details.

Admin

Allow file transfer to unmanaged devices

Lets you send and receive files during a remote control session on unmanaged devices. Read Remote Control for Unmanaged Devices for details.

Admin

View Non-Security Events

Lets you view all events in the security events log except those with type = Security. Read Audit Logs for details.

Admin

View Security Events

Lets you view events in the security events log with type = Security. Read Audit Logs for details.

Admin

View, Create, Edit and Delete Alerts

Lets you view, create, edit, and delete alerts. Read Create Alerts for details.

Admin, Editor

View and Configure ServiceNow Incidents

Lets you view and configure ServiceNow incidents. Read ServiceNow Integration for details.

Admin, Editor

View Scripts

Lets you view scripts that have been added to your organization. Read Scripting Guide for details.

Admin, Editor

View, Create, Edit and Delete Scripts

Lets you manage scripts in your organization, including adding new scripts. We recommend that you grant this permission only to senior administrators due to the inherent risk from adding and running custom scripts on your managed devices. Read Scripting Guide for details.

Admin, Editor

View Index Data

Lets you access all data indexes.

Admin, Editor

Read Indexes

Lets you view the total number of indexes, the total number of records, and the total GB stored.

Admin, Editor

Delete Indexes

Lets you delete a data index. Deleting a data index also deletes the contents of the index.

Admin, Editor

Prune Data

Lets you delete the contents of a data index.

Admin, Editor

View Custom Reports

Lets you view Custom Reports that other users in your organization have published. Read Create Custom Reports for details.

Admin, Editor

Create, Edit and Delete Custom Reports

Lets you create your own Custom Reports. Read Create Custom Reports for details.

Admin, Editor

Publish Custom Reports

Lets you publish your Custom Reports so that they can be viewed by other users in your organization. Read Create Custom Reports for details.

Admin, Editor

Create, Edit and Delete Filter Presets

Lets you create, edit, and delete your own private filter presets. Read Create and Share Filter Presets for details.

Admin, Editor

Publish Filter Presets

Lets you publish your filter presets so they can be used by all users in your organization. Read Create and Share Filter Presets for details.

Admin, Editor

Allow Export to CSV

Lets you export data to CSV

Admin, Editor

Configure Production Agent Versions

Lets you configure which Agent versions are installed on devices. Read Agent Version Control for details.

Admin, Editor

Configure Agent Intervals

Lets you configure the duration for short and long trigger intervals. Read Time-based triggers for details.

Admin, Editor

Configure Agent Feature Settings

Lets you configure Windows Event Log Collection settings. Read Windows Event Logs for details.

Admin, Editor

Configure Auto Deletion of Old Devices

Lets you configure auto deletion of devices after they haven't connected to ControlUp for a specified duration. Read Licensing for details.

Admin, Editor

Configure Custom Settings

Lets you configure Custom Settings. Note that custom settings let you make many different types of changes to your tenant, and you should apply custom settings only if you are specifically instructed to do so.

Admin, Editor

Configure Device Dashboards Settings

Lets you access the Web Console settings page to configure stress level thresholds and to display or hide time gaps in dashboard charts.

Admin, Editor

Configure End User Activity Collection

Lets you configure End User Activity data collection. Read End User Activity for details.

Admin, Editor

Configure End User Activity Collection - Individual User Info

Lets you enable or disable the setting Collect Individual User Information in End User Activity settings. Read End User Activity for details.

Admin, Editor

Configure Extended Settings

Lets you configure Extended Settings. Read Extended Settings for details.

Admin

Configure Network Latency Targets

Lets you add custom latency targets. Read Network Performance for details.

Admin, Editor

Configure ServiceNow Connector

Lets you configure the ServiceNow connector to integrate ControlUp for Desktops Alerts with ServiceNow. Read ServiceNow Integration for details.

Admin, Editor

View and Configure ServiceNow Incidents

Lets you use the ServiceNow integration’s features in ControlUp, such as viewing ServiceNow widgets and configuring an Alert to create a ServiceNow ticket. Read ServiceNow Integration for details.

Admin, Editor

Configure Google Cloud Connector

Lets you configure the Google Cloud connector for additional ChromeOS data collection. Read ChromeOS Deployment for details.

Admin, Editor

Configure Sustainability Integration Settings

Lets you configure the Sustainability Integration settings required for creating sustainability reports. Read Sustainability and Carbon Footprint Report for details.

Admin

License Assignment

Lets you use the License assignment feature to claim licenses. Read Licensing for details.

Admin

Show Agent Download Page

Lets you view the Agent downloads page to see your organization's device registration code and download the ControlUp for Desktops Agent. Read Agent Installation Overview for details.

Admin

Management Remote Control Settings

Lets you configure remote control/shadow auto-reconnect settings. Read Automatic reconnect for details.

Admin

View Reports with user privacy information

Lets you view the following reports:

• Location History

• Network Interfaces

• Power and Session Events

• Stopped Processes

• Top Users by Application

• Top User Process Elevations

• Top Users Starting Processes with Elevated Rights

• Local Administrators

• Logons and Sessions

• Top User Profiles by Size

• User Profiles

Lets you view the Device Events tab when viewing the details for a specific device (if you also have either the 'View Non-Security Events' or 'View Security Events' permission).

Admin, Editor

View End User Activity

Lets you view the End User Activity dashboard. Read End User Activity for details.

Admin, Editor

View Wi-Fi SSID and MAC

Lets you view view SSID and MAC address columns in reports. Note that you can still view the SSID and MAC address of a device outside of reports even if you don't have this permission.

Admin, Editor

View, Create, Edit and Delete Templates

Lets you create, edit, and delete survey templates. Read Survey Library for details.

Admin

View, Create, Edit and Delete Surveys

Lets you create surveys, and edit/delete surveys that you have created. Read Publish and Distribute Surveys for details.

Admin, Editor

Edit and Delete Surveys owned by other users

Lets you edit or delete surveys that other users have created. Read Publish and Distribute Surveys for details.

Admin, Editor

View Results from other Users Surveys

Lets you view survey results from surveys that other users have published. Without this permission, you can only view results from surveys that you have created.

Admin, Editor

Send On Demand Surveys

Lets you manually perform an action to send a survey to a device. Read On Demand Surveys for details.

Admin

Configure Global Settings

Lets you configure settings that affect all of your surveys. Read Employee Sentiment Settings for details.

Admin

Upload, Edit and Delete items

Lets you upload, edit, or delete items to the Media library. Read Asset Library for details

Admin

UC&C Dashboards

Lets you view UC&C dashboards, call details, and reports. Read Explore Microsoft Teams Data or Explore Zoom Data for details.

Admin, Editor, Viewer

View Zoom call topic

Lets you view the call topic of Zoom calls.

Admin, Editor, Viewer

API Configuration

Lets you configure Microsoft Teams and Zoom integrations. Read Microsoft Teams Integration or Zoom Integration for details.

Admin

Access Overview page

Lets you view the Overview page in the VDI & DaaS web UI. Read How to Access the VDI & DaaS Web UI for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Access Details page

Lets you view the Details page in the VDI & DaaS web UI. Read How to Access the VDI & DaaS Web UI for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Access Real-Time DX Console

Lets you sign in to the Real-Time DX console with your ControlUp account using the web-login feature. Read Sign into the Real-Time DX Console for details.

Admin, VDI and DaaS Admins

Edit and configure

Lets you perform all actions in the Editor permission, plus configure daily digest, system notification emails, and API keys.

Admin

Edit

Lets you edit, or delete Scouts, Hives, and alert policies. Also lets you configure integrations, maintenance windows, and apply activation keys.

Editor

View

Lets you view Scouts and Hives.

Viewer

Manage API keys

Lets you create, revoke, or delete API keys. Read Create an API Key for details.

Admin

Environment Assessment

Lets you view the Environment Assessment report. Read Environment Assessment for details.

Admin, Editor. Viewer, VDI and DaaS Admins

Sizing Recommendations

Lets you view the Sizing Recommendations report. Read Sizing Recommendations Report for details.

Lets you use the Get machine statistics for virtual environments and Get machine statistics for Azure environments API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

Session Count

Lets you view the Session Count report. Read Session Count Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Session Activity

Lets you view the Session Activity report. Read Session Activity Report for details.

Lets you use the Get user activity status and Get session statistics API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

Logon Duration

Lets you view the Logon Duration report. Read Logon Duration Report for details

Admin, Editor, Viewer, VDI and DaaS Admins

Protocol Trends

Lets you view the Protocol Trends report. Read Protocol Trends Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Machine Trends

Lets you view the Machine Trends report. Machine Trends Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Machine Statistics

Lets you view the Machine Statistics report. Read Machine Statistics Report for details.

Lets you use the Get machine statistics API endpoint.

Admin, Editor, Viewer, VDI and DaaS Admins

Host Trends

Lets you view the Host Trends report. Read Host Trends Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Host Statistics

Lets you view the Host Statistics report. Read Host Statistics Report for details.

Lets you use the Get host metrics per folder and Get host counts API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

Top Windows Errors

Lets you view the Top Windows Errors report. Read Top Windows Errors Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

NetScaler

Lets you view the NetScaler report. Read NetScaler Report for details.

Lets you use the Get NetScaler metrics and Get NetScaler metrics with time series API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

Load Balancing

Lets you view the Load Balancing report. Read NetScaler Load Balancing Report for details.

Lets you use the Get Load Balancer metrics and Get Load Balancer metrics with time series API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

Gateway

Lets you view the Gateway report. Read NetScaler Gateway Report for details.

Lets you use the Get Gateway metrics and Get Gateway metrics with time series API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

Citrix License Usage

Lets you view the Citrix License Usage report. Read Citrix License Usage Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

App Statistics

Lets you view the App Statistics report. Read App Statistics Report for details.

Lets you use the Get application statistics API endpoint.

Admin, Editor, Viewer, VDI and DaaS Admins

App Usage Details

Lets you view the App Usage Details report. Read App Usage Details Report for details.

Lets you use the Get usage details for an application and Get usage details for all applications API endpoints.

Admin, Editor, Viewer, VDI and DaaS Admins

App Trends

Lets you view the App Trends report. Read App Trends Report for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Published Apps

Lets you view the Published App Usage Details report. Read Published App Usage Details Report

Admin, VDI and Daas Admins

Manage Personal Automated Reports

Lets you create and manage personal automated reports (only viewable by the user that created it). 

Admin, Editor, VDI and Daas Admins

Manage All Automated Reports

Lets you create and edit all automated reports. 

Admin, VDI and Daas Admins

Cost Savings Dashboard

Lets you view the Cost Savings dashboard. Read Cost Saving Dashboard for details.

Admin, Editor, Viewer, VDI and DaaS Admins

Manage Sites

Let's you configure the Enrich plugin. Read Configure Enrich Settings for details.

Admin

Access ControlUp for Apps

Let's you view data from ControlUp for Apps. Read ControlUp for Apps Overview for details.

Admin, Editor, Viewer

Configure ControlUp for Apps

Let's you configure ControlUp for Apps settings. Read Deploy ControlUp for Apps for details.

Admin

View flows

Lets you view flow widgets, details, templates and integrations. Read Workflows Overview and Features for details.

Admin, Editor, Viewer

Create new flows

Lets you create new flows. Read Create a Flow for details.

Admin

Edit existing flows

Lets you edit existing flows. Read Create a Flow for details.

Admin, Editor

Delete flows

Lets you delete flows. Read Create a Flow for details.

Admin

Enable/disable flows

Lets you enable or disable flows. Read Create a flow for details.

Admin

View integrations

Lets you view the available integrations for workflows. Read Workflow Integrations for details.

Admin, Editor, Viewer

Configure new integration connections

Lets you configure new integrations. Read Workflow Integrations for details.

Admin

Edit integration settings

Lets you edit the settings of each integration. Read Workflow Integrations for details.

Admin, Editor

Delete integration connections

Lets you delete integrations. Read Workflow Integrations for details.

Admin

Create API keys

Lets you create API keys for flows.

Admin

Delete API keys

Lets you delete API keys for flows.

Admin

ControlUp Usage and Analytics

Let's you access the ControlUp Usage and Analytics section of the Customer Success Hub. This section contains analytics and statistics about you ControlUp organization including license consumption and user access.

Admin

My Success Hub

Let's you access the My Success Hub section of the Customer Success Hub. This section contains onboarding plans, important notifications, and information about your Customer Support tickets and Customer Success meetings.

Admin

View Desktop Events

Lets you view Desktops event data on the ControlUp Events Dashboard. Read ControlUp Events Dashboard for details.

Admin, Editor, Viewer

View VDI Events

Lets you view VDI event data on the ControlUp Events Dashboard. Read ControlUp Events Dashboard for details.

Admin, Editor, Viewer

View Synthetic Monitoring Events

Lets you view Synthetic Monitoring event data on the ControlUp Events Dashboard. Read ControlUp Events Dashboard for details.

Admin, Editor, Viewer

Edit Desktop Events

Lets you reorder, delete or reset event columns for Desktops events on the ControlUp Events Dashboard. Read Edit event columns for details.

Admin, Editor

Edit VDI Events

Lets you reorder, delete or reset event columns for VDI events on the ControlUp Events Dashboard. Read Edit event columns for details.

Admin, Editor

Edit Synthetic Monitoring Events

Lets you reorder, delete or reset event columns for Synthetic Monitoring events on the ControlUp Events Dashboard. Read https://support.controlup.com/v1/docs/incidents-and-events#edit-event-columns for details.

Admin, Editor

View Dashboards

Lets you view your personal dashboards and shared dashboards (organizational and ControlUp dashboards)

Admin, Editor, Viewer

Edit Dashboards

Lets you create and edit your personal dashboards

Admin, Editor

Edit Organizational Dashboards

Lets you create and edit personal dashboards, edit organizational dashboards, share dashboards with your org, unshare dashboards, view and duplicate ControlUp dashboards

Admin, Editor, Organizational Editor

Add Tenant

Lets you add a tenant to your Tenant Manager organization

Admin

Edit License

Lets you manage your Tenant Manager subscription, manage tenants, and edit their licenses

Admin