Utilizing the features and capabilities of the modern folders model, your Orchestrator and Tenant administrators are now able to delegate the administration of automation solutions according to department (or any other manner in which you want to organize your deployment).

This configuration only needs to be performed once, after which the automations are managed on a folder basis by your designated folder administrators. Thereafter, the only occasion where an Orchestrator or Tenant administrator must intervene is the creation of new folders if there are new departments added to the organization.

To configure your Orchestrator for such delegation, follow these steps:

1. Create the following roles as described here:
   • Tenant Administrator
   • Enable Folder Administration
   • Folder Administrator
   • Enable Running Automations
   • Automation User
2. Create a folder for each set of automations that are to be managed separately.
   Note: This division can be done in whatever manner is best suited to your needs, whether by departments (i.e. Finance, HR, Sales) or by specific automations (i.e. Earnings Reports, Onboarding, Expense Reports).
3. Assign the Tenant Administrator role, at tenant level, to the user(s) you are delegating the management of all tenant entities (e.g. Machines, Users, Roles, Assets, etc.) to, if not performing this function yourself.

📘

Note:

If you are delegating Tenant administration, the remaining steps can be performed by these designated users.

4. For the Orchestrator users that need to manage their own folders and subfolders, assign the following roles:
   • Enables Folder Administration at tenant level; and
   • Folder Administrator at folder level.
5. For the Robot users that need to execute the automations, assign the following roles:
   • Enable Running Automations at tenant level; and
   • Automation User at folder level.

📘

Note:

Where possible, we recommend using directory users or groups rather than local users. By using directory users rather than local users, you eliminate the need to manually update Orchestrator as administrators are added or removed from these departments, rather it is done on the enterprise level through your AD groups.