Roles

 

User Roles define the specific access rights the user can have. Depending on the role the user is assigned to, user can either only view, view and edit, or have no access at all to different sections of my.anydesk II management console.
	Roles for Advanced Roles for Ultimate Manage roles

Assigning roles to users helps you improve your productivity and security by reducing the threat that users have access to functionality they should not have access to.

In this article, view all details about user roles depending on the license you have:

• Roles for Advanced license
• Roles for Ultimate license 
  

---

Roles for Advanced license 

The Team Roles functionality for Advanced license users is available only if you activate it. Once activated, find the default roles in the Roles tab. Each role has different sets of permissions that define what users can see and do within the management console.

In this section, check the following: 

• Roles overview
• Activate Team Roles
• Deactivate Team Roles

Roles overview

In the table below, check the roles available for the Advanced license and the permissions each role has. 

my.ad sections	Assignable roles				Non-Assignable roles
	Admin	Data Protection Officer	Tech Support	User	Owner	Default
Users	view & edit	view	view	-	view & edit	view
Roles	view & edit	view	-	-	view & edit	-
Address Book	view & edit	view	view	-	view & edit	view & edit
Clients	view & edit	view	view	view	view & edit	view & edit
Sessions	view & edit	view	-	-	view & edit	view & edit
Builds	view & edit	-	-	view	view & edit	view & edit
Team	view & edit	view	-	-	view & edit	view
License	view	view	-	-	view & edit	view & edit
Invoice	view	view	-	-	view & edit	view & edit

Activate Team Roles

You can activate Team Roles by clicking Activate in the Roles tab. After that, each user in your team will be assigned to the User role. You can change the role for each user depending on which rights you want to grant them. For more information on how to assign roles to users, see Assign role to a user in this article. 

Deactivate Team Roles

You can deactivate Team Roles if you do not to use this feature. After deactivating, all users will have the same permissions as displayed in the table above for the Default role. 

To deactivate Team Roles, click Disable feature in the Roles tab. 

---

Roles for Ultimate-Cloud license

With an Ultimate-Cloud license, you can find the default roles in the Roles tab. Each role has different sets of permissions that define what users can see and do within the management console.

You can view the following roles for the Ultimate-Cloud license:

• owner - a role is designed for a license owner. With this role, they can view and edit every section of the management console and delete the Organization. 
• admin - a role allows the user to view and edit all the section of the management console apart from License, Invoices, and Personal profile. 
• support_agent - a role allows the user to view the Users, Groups, Address Books, and Clients sections of my.anydesk II management console.
• accountant - a role for a person within your organization that deals with invoices. The role grants the access to only view the Organization, License, and Invoices sections. 
• data_protection_officer - a role allows the user to view all the section of my.anydesk II management console apart from Builds and Personal profile. 
• user - the default role for every user.  With this role, they can view and edit Address Books, Clients, and Sessions sections as well as their personal profile. 

Open the role to view all the details about it. 

Role overview page for the Ultimate-Cloud license

In the About section, view the following information:

• Role name – the name of the role added when it was created.
• Role description – the description or details of the role.
• Federated role – displays if the role is mapped from the active directory.
• Role ID – a unique number assigned to the role.

In the Permission Sets section, you can view all the permission sets assigned to the role. You can also delete or add more permissions sets to the role.

In the Members section, view all users assigned to the role. 

The role can have one of the following statuses:

---

Manage roles

In this section, learn how to do the following: 

• Assign roles to a user
• Create a new role
• Assign permissions to a role

Assign role to a user

You can assign the role to a user depending on what they need to see and do in the management console. 

To assign a role to the user: 

1. In my.anydesk II account, go to Roles.
2. From the list, open the role to which you wish to assign a user.
3. On the opened page, in the Members section, click Add members.
4. In the pop-up window, select the desired user from the list and click Add.  

After that, the user will have the access to those sections of my.anydesk II that are defined within that role. 

---

Create a role

If one of default roles in my.anydesk II does not cover your needs, you can create a new role. After you create a role, you need to assign permission sets to it and then add a user to it. 

To create a role:

1. In my.anydesk II account, go to Roles.
2. Click Create role and in the pop-up window, provide the following information:
   • Name – type the name of the role.
   • Description – type the short description of the role.
     
3. Click Save role.

Once the role is created, you can open it, view all the details, and edit it.

---

Assign permission set to a role

Once you create a role, you need to assign a permission set to it. This way, depending on the permission set that is assigned to a role, a user with that role can either only view, view and edit, or have no access at all to different sections of my.anydesk II. 

To assign a permission set to a role: 

1. In my.anydesk II account, go to Roles.
2. From the list, open the role to which you wish to assign a permission set.
3. On the opened page, in the Permission Sets section, click Edit.
4. Click Assign Permission Set and in the pop-up window, select the desired permission set from the list.  
   
5. Click Submit. 

You can assign several permission sets to the role.