Assigning variable admin permissions
By default, a user with team admin permissions has access to all features and settings within your Celonis Platform. Admins can manage users, edit team security settings, and update service permissions. However you may want to enable some users to only perform a selection of those admin roles, such as managing users or content only. To achieve this, you can assign variable admin permissions to users and groups within your Celonis Platform .
To assign variable admin permissions:
Click Admin & Settings - Permissions to open the Permissions screen.
Locate the Team permissions and click Edit.
Assign the required permissions by either:
Using the Admin templates to apply a set of permissions.
Selecting individual permissions. See the full list here: Team permissions.
Click Save.
The user permissions have been updated and are now applied to the relevant user.
Admin templates
When assigning variable admin permissions, you can take advantage of the variable admin templates. These templates provide a defined subset of admin permissions.
User Admin: A role that can invite, lock, and remove users, but can’t set content permissions.
Content Admin: A role that can only manage service permissions.
System Admin: A role that can manage SSO, IP restrictions, and system-related features only.
 |
Variable admin preferences
In addition to assigning admin permissions, you can also set your variable admin preferences for your team. These preferences allow full team admins to further control what the abilities of the variable admins within their team.
To set your variable admin preferences - click Admin & Settings and then scroll down to Variable admin preferences:
 |
By default, the following permissions are enabled (and can be disabled by full team admins only):
CSV downloads of the following:
Audit logs
User groups
User login histories
User permissions
Inviting users, creating groups, and creating application keys.
When preferences are disabled, any existing users holding variable admin permissions will lose access to the relevant admin features.