Custom Admin Roles

JumpCloud uses roles to define access control and assign specific permissions to users, both within the Admin Portal, and across systems and resources (like users, groups, policies, and devices). This enables granular control, allowing Admins to tailor roles based on specific responsibilities and requirements. You can create custom Admin roles with specific view and edit access.

Prerequisite:

• Super Admin (Admin with Billing or equivalent) role is required for creating custom Admin roles.

Creating a Custom Role

To create a custom role:

1. Log in to the JumpCloud Admin Portal.

2. Go to Settings > Administrators. All  Admins are listed here.
3. Go to the Custom Roles tab.
4. Click +Add Custom Role.
   
5. Enter a Custom Role Name and Description (optional).
6. Click Choose Default Role as Template, and select an option from the drop-down menu. For the selected role, the permissions appear.
   
7. Edit the permissions as required and click Save.

You’ll see a success message stating that a custom role has been created. 
Currently, we support a maximum of 20 custom roles. The Admin can assign a custom role to an existing or newly created Admin.

Custom Admin Roles Permission Categories

Admin with Billing role (Super Admin) can allow specific combinations of granular permissions in permission categories to the admins. Here is a table that describes the permission categories and the respective permissions:

Access Management

These permissions govern advanced security and authentication settings within the Admin portal.

Application Management

Allow Admins to manage applications including identity management integrations.

Associations

Create and manage associations between resources.

Command & Automation

Manage and execute remote commands on systems. Additionally, Admins can create and manage reusable command templates.

Core Administration

Manage core administration tasks including notification channels and service accounts.

Device Management

Manage devices, volume purchase program, and remote assist permissions.

Directory Integration Management

Create and manage directories and directory integrations.

Groups Management

Create and manage user, device, and policy groups.

Monitoring & Analytics

Manage monitoring and analytics tools.

SaaS and Asset Management

Manage SaaS applications. Also, track and manage organizational IT assets.

User Management

Manage users and set various user settings.

Editing and Updating a Custom Role

To edit and update a custom role:

1. From the JumpCloud Admin Portal, go to Settings> Administrators.
2. Go to the Custom Roles tab.
3. Click the Role Name that you want to edit the details for.
4. Make changes and click Save.

Deleting a Custom Role

To delete a custom role:

1. From the JumpCloud Admin Portal, go to Settings> Administrators. Go to the Custom Roles tab.
   
2. Click Delete next to the role you want to delete. A pop-up will appear.
3. Select an alternate role for the respective users who have been assigned the custom role. Then click Delete.