ROLE_ADMIN_USER Access permissions
Learn about ROLE_ADMIN_USER role to manage access permissions for managing user operations.
Assign roles to user and group accounts to grant them permissions (access rights and privileges). For more information, see User Management at a glance.
ROLE_ADMIN_USER is a critical high-privilege system role for customer-scoped user management. It grants access to manage users, groups, roles, and related user management operations within the same customer.
In the role hierarchy, lower roles are those assigned below ROLE_ADMIN_USER.
Role assignment limits
A user with ROLE_ADMIN_USER can assign ROLE_ADMIN_USER, ROLE_ADMIN_TENANT, and lower roles only within the same customer for which that role is granted.
ROLE_ADMIN_USER cannot assign ROLE_ADMIN_CUSTOMER.
This role can manage customer-scoped users, groups, and roles, but it does not grant the higher customer-scoped administrative role.
Access permissions
This table identifies the Reltio access permissions for Reltio services, resources, and sub resources defined for the ROLE_ADMIN_USER system role.
| Permissions for | Access rights (service/ resource/ sub resource) | Access privileges |
|---|---|---|
| Accessing all APIs related to client management | Auth.customer.clients |
|
| Accessing APIs that manage the customer specific groups | Auth.customer.groups |
|
| Accessing APIs that manage the customer specific roles | Auth.customer.roles |
|
| Accessing all APIs related to user management | Auth.customer.user |
|
| Accessing the authentication audit log | Auth.monitoring |
|
| Accessing all Reltio system roles | Auth.globalRoles |
|
| Accessing all Reltio services | Auth.reltioServices |
|
| Accessing UI modeler details in the console | console.uimodeler |
|
| Using APIs for tenant physical configuration | MDM.config.physical |
|
| Accessing recommendation service management for search facets | recommender.management |
|
| Accessing recommendation querying | recommender.recommendation |
|
| Accessing recommendation service status | recommender.status |
|