Administrative Roles for the Cloud Administration Console

Administrative roles control what you can view and manage in the Cloud Administration Console for Cloud Access Service (CAS). For example, roles affect the management of identity routers, access policies, and user authenticators. Each administrator is assigned an administrative role with specific privileges. The Cloud Administration Console supports two administrative roles:

• Super Admin

• Help Desk Admin

Super Admin

Super Admins have unrestricted privileges in the Cloud Administration Console, including the ability to add or edit other administrators. Super Admins are responsible for setting up RSA for the first time, then maintaining, updating, and troubleshooting the deployment as necessary.

RSA creates one initial Super Admin account in the Cloud Administration Console and provides the associated username and password in an email message. Use this account to add new administrators. RSA recommends that you add multiple Super Admins so that if one Super Admin account needs a password reset, another Super Admin can access the account and change the password.

Note:  Super Admins for the Cloud Administration Console can manage identity routers and settings in CAS. Settings in Authentication Manager can be managed only by administrators with assigned roles in Authentication Manager. For example, identity routers that are embedded in AM 8.5 or later can only be downloaded, installed, and deleted from the Security Console by administrators with appropriate roles in AM.

To change an administrator's role, see Add, Edit, or Delete an Administrator in the Cloud Administration Console.

Help Desk Administrators