What is role-based access control?
Role-based access control, or RBAC, restricts system access to authorized users. RBAC allows you to assign owners and lock down access where appropriate. If you manage many unique organizations internally or for clients, RBAC enables you to easily move between different instances to assign various levels of roles and privileges.
RBAC solves security administration challenges in large organizations but can also create security gaps due to changing security threats and risks.
Global Zone Management solves these challenges with modern RBAC you can customize to suit any organizational structure. Logically segment your endpoints into zones to match how your organization operates – whether by hierarchy, geography, or business structure. Then, assign access based on the corresponding level of authority – and get as broad or granular as needed.
Levels of Access by Role
Leverage six roles for immense flexibility
Global Administrator Role
The Global Administrator controls the organization's entire endpoint environment. You can manage access for all zones, take action on any endpoint, and assign roles and permissions. Add users to the console and grant access to existing zones or create new zones and assign users directly.
Zone Administrator Role
Zone Administrators manage access and operations within assigned zones set by the Global Administrator. You focus only on your zones, eliminating distractions from irrelevant endpoints. You set access privileges, manage devices, and handle patching tasks efficiently within your scope.
Zone Operator Role
Zone Operators create and edit policies for automated software deployment, patching, and configuration management. You can also edit groups within a zone and access robust reporting features. This role is perfect for managing one or more zones without overseeing users or global settings.
Patch Operator Role
The Patch Operator role focuses solely on automating patch operations. You can’t create or edit WorkletTM automations or required software policies. This role is ideal for managing patch programs and keeping systems updated efficiently.
Helpdesk Operator Role
Helpdesk Operators provide hands-on support for end users and remotely control endpoints through Automox. You can view devices, software, and Worklets in the console, but edits aren’t allowed. This role is perfect for supporting end users as part of your helpdesk team.
Billing Administrator Role
Billing Administrators can update billing settings for their assigned zones. You handle tasks like adding a corporate credit card or generating invoices. You have read-only access to other zones but cannot perform IT operations in the Automox console.
“Great time-saving and effortless product. Constantly improving and providing great support.”
- Director Of Information Technology in the Transportation Industry
Global Zone Management Capabilities
Gain radical efficiency with global administration
Single View and Centralized Management
Navigate to the Setup and Configuration Dashboard to see all zones and users within your organization or MSP. With this complete view of your endpoint environment, you can create new zones with a few clicks and easily navigate between them.
Create New Zones and Assign Zone Roles
Create zones and add users with precise roles and permissions faster than ever – leaving more time for strategic work.
Create New Users and Assign Roles
Create users and manage all roles and permissions across all zones with incredible efficiency.