Managing roles

Create, edit, and manage user roles with customizable access to applications in the SaaS environment. You can customize each role by specifying app-level permissions, ensuring users have secure and appropriate access based on their responsibilities.

Built-in roles

Built-in role is predefined role provided by BigFix SaaS to streamline user and access management.

Administrator: This role comes with default configurations and permissions that address common administrative and operational needs. Administrators have access to all available applications. They have the ability to create, delete, and edit users.
Important: Admin role is the built-in role that you cannot modify or delete.

Custom roles

Custom roles are user-defined roles in BigFix SaaS that allow administrators to tailor permissions and access based on specific organizational requirements. These roles provide flexibility to control which users, devices, and applications are accessible within the environment. These roles can be edited, reassigned, or deleted (if no users are assigned).
Create a custom role
Creating a custom role involves defining a user role with specific permissions and access tailored to your organization's unique requirements. Unlike built-in roles, which have fixed configurations, custom roles allow flexibility in managing devices, applications, and user assignments. For detailed steps, read Creating a new role.
Note: Users can create a maximum of 20 custom user roles.
Modify a custom role
  1. From the User Manager app, click Roles.
  2. Open an existing custom role and modify the following as necessary.
    • Role name
    • Assigned apps (excluding default apps which remain fixed)
    • Assigned users
    • Assigned computer groups (e.g., All Computers, Filtered Groups)
    • Admin status
    Example: Update a dynamic filter to refine device selection, such as filtering by Device Properties.
  3. Save changes.
Note: Role updates affect permissions in real time after a user logs in.
Delete a custom role

You can delete a role only if:

  • The role is not assigned to any users.

  • The role is not marked as an admin role.

To delete a custom role:
  1. Unassign all users from the role.
  2. Click Delete.
  • If no users are assigned to a role, click the Delete button to remove it.

Default and Non-Removable Applications

Certain applications are marked as default in the backend and are automatically assigned to every role. These apps cannot be unselected during role creation or editing.

Examples include:

  • My Dashboard (home screen)

  • Device Explorer

  • Deployment Manager (depending on product configuration)

Assigning a role to users

As an administrator, when creating a new user , you can assign a role to ensure they have the appropriate level of access from their first login. You can reassign the roles at any time to adapt to organizational changes, evolving operational needs, and updated security policies.

To reassign users roles:

  1. In the User Management section, go to the Users tab.
  2. Select one or more users from the grid.
  3. Click Reassign and select a new role from the available options.
  4. To verify the action, from the User Manager grid, check the Roles column to see the associated role displayed next to the selected users.