User and partner role permissions

  • May 17, 2021
  • min read

Workspace level roles

In general: Roles within workspaces can only be assigned to Emsisoft user accounts or Emsisoft Partner accounts.

Available roles within workspaces are:

Primary Workspace Owner

Is the legal owner of the workspace and responsible for all activities within a workspace. Has full access to everything and can re-assign ownership to another user.

Typical use case: The person that bought the software directly at Emsisoft.

Workspace Admin

Has full access to the workspace and can view/edit all devices, policies, incidents, logs, reports, users and the license of your workspace. Workspace Admins can change all user permissions except those of the Primary Workspace Owner.

Typical use case: An organization has multiple full-access administrators to share management tasks of the workspace.

Protection Manager

Can view/edit all protection relevant settings, such as devices, policies, alerts, logs, reports, but can’t change the workspace settings such as user roles and licensing.

Typical use case: A trusted third party who has more experience with security software manages the protection for the workspace, i.e. an IT professional or the ‘computer geek’ in the family.

Billing Contact

Special case: This role can not be manually assigned like the other roles. It is implicitly defined through the assignment of a license to an Emsisoft partner account. It is only displayed for workspaces that use partner-assigned licenses.

Billing contact is responsible for license payments at Emsisoft. Can view/edit license information, but doesn’t have access to devices or other protection related workspace settings.

The billing contact receives license renewal reminders from us.

Typical use case: A managed service provider (MSP) or reseller who sells the malware protection in a bundle with other services, i.e. general computer maintenance services.

User access

Feature Primary Workspace Owner Workspace Admin Protection Manager
Workspaces list
Yes
Yes
Yes
WS Dashboard
Yes
Yes
Yes
WS Incidents
Yes
Yes
Yes
WS Policies
Yes
Yes
Yes
WS Reports/Logs
Yes
Yes
Yes
WS Settings: General
Yes
Yes
Read-only
WS Settings: Licensing
Yes
Yes
Read-only
WS Settings: Users
Yes
Yes (except change of owner) Read-only

Partner account level roles

Partner accounts are virtual entities that have the same functionality as user accounts, but can contain multiple users. E.g. a partner company can have one or more employees that will be granted access to all workspaces where the partner account has a role assigned.

Available roles within partner accounts are:

Primary Partner Account Owner

Is the legal owner of the Emsisoft Partner account and is responsible for all activities within a partner account. Has full access to everything within the partner account (billing, licenses, settings, users) and can re-assign ownership to another user.

Typical use case: The owner of the partner company.

Protection Admin

Can:

Can’t:

Typical use case: A tech employee of a partner company who’s job is to set up new workspaces and monitor the security of managed workspaces. Shouldn’t need to see any billing related information.

License Manager

Can:

Can’t:

Typical use case: A sales employee of a partner company who’s job is to sell licenses (new and renewals). Shouldn’t see any protection/technical related information of customer workspaces.

Partner access

Feature Primary Partner Account Owner Protection Admin License Manager
Partner: Buy a License
Yes
No
Yes
Partner: Manage Licenses
Yes
No
Yes
Partner: Order History
Yes
No
Yes
Partner: Sales Assets
Yes
No
Yes
Partner: Policy Templates
Yes
Yes
No
Partner: Report Templates
Yes
Yes
No
Partner: Settings
Yes
Yes
Yes (read-only)
Workspaces list
Yes
Yes
Yes (license information only) 1
Create new workspace Yes Yes Yes
WS Dashboard: if partner is owner/admin/manager Yes Yes No (redirects to WS settings) 1
WS Incidents: if partner is owner/admin/manager Yes Yes No
WS Policies: if partner is owner/admin/manager Yes Yes No
WS Reports/Logs: if partner is owner/admin/manager Yes Yes No
WS Settings: if partner is owner/admin/manager Yes Yes (license section read-only) Yes (edit license only, everything but the WS name hidden) 1
WS Dashboard: if partner is billing only Yes (license information only) 1 No Yes (license information only) 1
WS Policies, Incidents, Reports, Logs: if partner is billing only Yes No No
WS Settings: if partner is billing only Yes (edit license only, everything but the WS name hidden) 1 No Yes (edit license only, everything but the WS name hidden) 1

Remarks

(1): If the partner account only has the billing contact role but not technical roles on a workspace:

Rating: 5.0/5. From 2 votes.
Please wait...

Similar topics