Roles and permissions

User roles define default permissions that determine which actions users can perform.

In DeviceHub, different user roles can be assigned. User roles (owner and Location Admin) have predefined default permissions: owners have full administrative rights, while Location Admins have limited device-related rights.
Please note the following rules:
  • Users who have created an organization are automatically assigned the owner role.
  • It is required that at least one owner is existing in an organization.
  • There can be multiple owners in one organization which all have the same rights.

Depending on the user role, different user rights apply, which are assigned by default as shown in the overview:

Types of user roles

Role Role permission
Owner
  • Can view and manage all locations
  • Can enroll, configure, monitor and remove devices from any location
  • Can add or remove users from the organization and manage user permissions
  • Can create and delete an organization and manage organization data.
    An organization may have multiple owners but must have at least one.
Location Admin
  • Can add and manage locations and rooms of the assigned top-location
  • Can view, configure and monitor all devices to the assigned top-location they were given access to
    A Location Admin can be assigned no location during invitation or role editing; they then cannot manage devices or locations.

User roles and permissions

User rights Owner Location Admin
User management
View users ✓ ✓
Invite/edit users, resend/revoke invite, edit role ✓ X
Delete users ✓ X
Locations and rooms
View locations ✓ ✓
to which they are assigned to
Create/delete top locations ✓ X
Rename top locations ✓ ✓
Add, edit, delete sub-locations and rooms ✓ ✓
only for top-locations they are assigned to
Devices
View devices ✓ ✓
if assigned to their location
Enroll devices ✓ X
Configure devices ✓ ✓
if assigned to their location
Assign device to room/remove room assignment ✓ X
cannot see devices that are not assigned
Change room assignment ✓ ✓
within location they are assigned to
Delete device ✓ X
Organization
View organization ✓ ✓
Edit organization settings ✓ X
Delete organization ✓ X
Insights
View dashboard ✓ ✓
devices assigned to their location
Filter device list ✓ ✓