What is Role-Based Access Control?
Role-based access control, or RBAC, restricts system access and permissions to what’s necessary, and nothing more. If you manage many unique organizations internally or for clients, RBAC enables you to easily move between different instances to assign various levels of roles and privileges.
RBAC solves security administration challenges in large organizations but often misses a key piece of the access puzzle – context.
Global Organization Management and Custom Roles solve this with modern least-privilege access you can customize to suit any organizational structure and access policy.
Logically segment your endpoints into organizations to match how your org operates – whether by hierarchy, geography, or business structure. Then, assign access based on the corresponding level of authority – with seven premade access templates and unlimited customization down to each capability with Custom Roles.
Role Templates to Provision Admins Quickly
Leverage seven roles for immense flexibility
Global Administrator
The global administrator controls the organization's entire endpoint environment. You can manage access for all organizations, take action on any endpoint, and assign roles and permissions. Add users to the console, grant access to existing organizations, or create new ones and assign users directly.
Organization Administrator
Organization administrators manage access and operations within assigned organizations set by the Global Administrator. Focus only on your organizations, eliminating distractions from irrelevant endpoints. You set access privileges, manage devices, and handle patching tasks efficiently within your scope.
Organization Operator
Organization operators create and edit policies for automated software deployment, patching, and configuration management. Edit groups within an organization and access robust reporting features. This role is perfect for managing one or more organizations without overseeing users or global settings.
Patch Operator
The patch operator role focuses solely on automating patch operations. You can’t create or edit WorkletTM automations or required software policies. This role is ideal for managing patch programs and keeping systems updated efficiently.
Helpdesk Operator
Helpdesk operators provide hands-on support for end users and remotely control endpoints through Automox. View devices, software, and Worklets in the console, but edits aren’t allowed. This role is perfect for supporting end users as part of your helpdesk team.
Billing Administrator
Billing administrators can update billing settings for their assigned organizations. Manage tasks like adding a corporate credit card or generating invoices. You have read-only access to other organizations but cannot perform IT operations in the Automox console.
Read-Only
Read-only users can access Automox for the specified organizations, but won't be able to change, delete, or create anything.
Customized Control to Align to Your Policies
Use Automox role templates or build your own roles to align administrator privileges in Automox to your access policies. Realize true least-privilege access provisioning with capability-level customization for each member of your team coupled with context-aware access provisioning based on the organization they’re working in.
Global Zone Management Capabilities
Gain radical efficiency with global administration
Single View and Centralized Management
Navigate to the Setup and Configuration Dashboard to see all organizations and users within your organization or MSP. With this complete view of your endpoint environment, you can create new organizations with a few clicks and easily navigate between them.
Create New Organizations and Assign Organization Roles
Create organizations and add users with precise roles and permissions faster than ever – leaving more time for strategic work.
Create New Users and Assign Roles
Create users and manage all roles and permissions across all organizations with incredible efficiency.
Overall User Rating
“We needed a solution that was cloud-based, served our multi-OS environment, and gave us the right mix of automation and control needed to configure / customize a variety of end users. Automox just worked.”
- Director Of Information Technology in the Transportation Industry
