This page displays the permissions included for each default role in Orchestrator.
You can view and edit the permissions for each role from the Roles page by clicking the More Actions icon on the right end of a row.

Administrator Role

📘

Note:

This is a mixed role and includes both tenant and folder permissions.
With mixed roles, for a global operation, only the user's tenant permissions are taken into consideration; for a folder-specific operation, if a custom role is defined, folder permissions are applied in favor of any tenant permissions present.

It includes the following rights, which cannot be changed.

Robot Role

📘

Note:

This is a mixed role and includes both tenant and folder permissions.
With mixed roles, for a global operation, only the user's tenant permissions are taken into consideration; for a folder-specific operation, if a custom role is defined, folder permissions are applied in favor of any tenant permissions present.

By default, the role has the following rights, which can be edited.

Personal Workspace Administrator Role

This is a folder role and it includes the following rights by default, which cannot be edited.

Standard Roles for Modern Folders

The following roles are pre-configured to manage permissions at the tenant level and at the folder level, which is required to work in modern folders.
They are only available if you choose to create them for your tenant from Tenant > Settings > General.

📘

Note

The names of some roles changed in June 2020. See the release note for details.

Tenant Administrator

This is a tenant role and includes the following rights by default, but they can be edited.

Allow to be Folder Administrator

This is a tenant role and includes the following permissions by default, but they can be edited.

Folder Administrator

This is a folder role and includes the following permissions by default, but they can be edited.

Allow to be Automation User

This is a tenant role and includes the following permissions by default, but they can be edited.

Automation User

This is a folder role and includes the following permissions by default, but they can be edited.