Roles and permissions

Everyone who signs in to NounDesk has one of four roles. This page lists exactly what each role can do.

Who: Owners choose each person’s role. See Invite admins.

The four roles at a glance

Role	In short
Owner	Everything, including billing, admins and the Google connection.
Admin	Devices, employees, apps, policies and alerts. No billing or admin management.
Operator	Day-to-day device work: enroll, assign, lock, reboot, lost mode, resolve alerts. Cannot erase devices or change policies.
Viewer	Read-only access to everything except billing.

The rules are enforced twice. NounDesk hides buttons you can’t use, and it also refuses the action on its servers and in its database. Changing a page or calling NounDesk directly doesn’t get around a role.

Full matrix

✓ = allowed. — = not allowed.

Devices

What	Owner	Admin	Operator	Viewer
See devices, the dashboard and device details	✓	✓	✓	✓
Add devices: QR codes, enrollment profiles, zero-touch	✓	✓	✓	—
Rename a device, assign an employee, move it to a group	✓	✓	✓	—
Create and edit device groups (adding devices to a group that has a policy needs Owner or Admin)	✓	✓	✓	—
Lock, reboot, lost mode, reset password, clear app data, refresh info	✓	✓	✓	—
Erase a device	✓	✓	—	—
Retire a device	✓	✓	—	—

Employees

What	Owner	Admin	Operator	Viewer
See employees	✓	✓	✓	✓
Add, edit, deactivate and reactivate employees	✓	✓	✓	—
Choose Erase devices when deactivating an employee	✓	✓	—	—

Security policies

What	Owner	Admin	Operator	Viewer
See policies and their settings	✓	✓	✓	✓
Create, edit and archive policies; set up kiosks and remote support	✓	✓	—	—
Publish a policy, or put devices on a different policy (including a group’s policy)	✓	✓	—	—

Apps

What	Owner	Admin	Operator	Viewer
See apps and app compliance	✓	✓	✓	✓
Add and remove apps, use Google Play, upload your own apps	✓	✓	—	—

Company documents

What	Owner	Admin	Operator	Viewer
See the documents library	✓	✓	✓	✓
Upload, edit and remove documents	✓	✓	—	—

Alerts

What	Owner	Admin	Operator	Viewer
See alerts	✓	✓	✓	✓
Acknowledge and resolve alerts	✓	✓	✓	—
Change alert Notification settings	✓	—	—	—

Reports and audit log

What	Owner	Admin	Operator	Viewer
See reports and the audit log, download CSV files	✓	✓	✓	✓

Billing

What	Owner	Admin	Operator	Viewer
See the billing page	✓	—	—	—
Start a subscription, change devices, update the card	✓	—	—	—

Organization

What	Owner	Admin	Operator	Viewer
See the Organization page	✓	✓	✓	✓
Edit company details and Defaults for new devices; use demo mode	✓	—	—	—
Connect Google Android Enterprise	✓	—	—	—

Admins

What	Owner	Admin	Operator	Viewer
See who has access (the Admins list)	✓	✓	✓	✓
Invite, resend, revoke, change roles and remove people	✓	—	—	—

Everyone, whatever their role, can edit their own profile and password. See Your profile and password.

Choosing a role

• Owner: the business owner, and one trusted backup. An organization always needs at least one Owner.
• Admin: the person who looks after phones and security day to day.
• Operator: a manager or office lead who hands out phones and helps with lost ones, but shouldn’t erase devices or change security rules.
• Viewer: an accountant, auditor or outside advisor who only needs to look.

Related

• Invite admins
• Organization settings
• Reports and the audit log