Managing roles

This topic explains how to create and manage user roles in the BigFix SaaS User Management app. This feature streamlines managing roles in BigFix involving creating, editing, and assigning roles to control user access, associated devices, and application permissions.

Built-in roles

Built-in roles are predefined roles provided by BigFix SaaS to streamline user and access management. These roles come with default configurations and permissions that address common administrative and operational needs.
Important: Built-in roles are essential system roles that you cannot modify or delete.
Following are the built-in roles available within BigFix SaaS:
  • Administrator: Administrators have access to all available applications. They have the ability to create, delete, and edit users.
  • Service Manager
    • Responsible for managing both local and remote servers from their machines without needing physical access or enabling Remote Desktop Protocol (RDP) connections.
    • Ensures the smooth functioning of both servers and networks.
    • Does not have access to User Manager.
  • Workstation Manager
    • Oversee the use of both virtual and physical workspaces and ensures optimal utilization of all available spaces.
    • Establishes criteria for what constitutes a ready-to-use workspace and ensures all workspaces meet these standards before use.
    • Guarantee that every user has access to appropriate workspaces, regardless of their working configuration (remote, in-office, hybrid).
    • Does not have access to User Manager.

Custom roles

Custom roles are user-defined roles in BigFix SaaS that allow administrators to tailor permissions and access based on specific organizational requirements. These roles provide flexibility to control which users, devices, and applications are accessible within the environment. These roles can be edited, reassigned, or deleted (if no users are assigned).
Create a custom role
Creating a custom role involves defining a user role with specific permissions and access tailored to your organization's unique requirements. Unlike built-in roles, which have fixed configurations, custom roles allow flexibility in managing devices, applications, and user assignments. For detailed steps, read Creating a new role.
Modify a custom role
  1. From the User Manager app, click Roles.
  2. Open the created role and adjust its filters, associated devices, or configurations.
  3. Example: Update a dynamic filter to refine device selection, such as filtering by Device Properties.
Delete a custom role
  • If no users are assigned to a role, click the Delete button to remove it.

Assigning a role to users

As an administrator, when creating a new user , you can assign a role to ensure they have the appropriate level of access from their first login. You can reassign the roles at any time to adapt to organizational changes, evolving operational needs, and updated security policies.

To reassign users roles:

  1. In the User Management section, go to the Users tab.
  2. Select one or more users from the grid.
  3. Click Reassign and select a new role from the available options.
  4. To verify the action, from the User Manager grid, check the Roles column to see the associated role displayed next to the selected users.