Team and roles

Give the office manager the keys, not the wrecking ball.

NounDesk has four roles. Owner has full control including billing. Admin can do everything except billing. Operator handles day-to-day work such as enrolling devices, assigning employees, locking and rebooting, but cannot erase devices or change security policies. Viewer is read-only. Team members are invited by email, and every action is recorded in the audit log.

Start free All features

Team & roles in NounDesk.

The four roles

The person who resets a locked phone at 7 am is rarely the person who should be able to erase the whole fleet.

Owner has everything, including billing, and can promote other Owners.
Admin has everything except billing.
Operator handles day-to-day work but cannot erase devices or change policies. Viewer is read-only.

Four roles

OwnerEverything, including billingFull
AdminEverything except billingHigh
OperatorDay-to-day work, no erase, no policy changesDaily
ViewerRead-only, can download reportsRead

Invite by email, change access any time

Add a teammate with their email address and a role. They sign in and see only what their role allows.

Invitations are sent by email and show as pending until accepted.
Change or remove someone's access from the team page whenever you need to.
Viewer is the right role for an accountant or an outside IT consultant who needs to read reports.

Invite a teammate

office@yourcompany.comOperator · invitation sentPending
accountant@firm.comViewer · acceptedActive
Change or remove accessAny time, from the team pageAnytime

Least privilege, without the lecture

Most small businesses end up with one login shared by three people, because the alternative felt complicated. Roles fix both problems.

Each person has their own login, and each login can only do what it should.
Erasing a device and publishing a policy stay with Owners and Admins.
The audit log records who did what, so a mistake is a look-up rather than an argument.

Who can do what

Enroll, assign, lock, rebootOwner, Admin, OperatorAllowed
Erase a deviceOwner and Admin onlyRestricted
Publish a security policyOwner and Admin onlyRestricted
Every action is loggedWith who did it and whenAlways

The person who resets a locked phone at 7 am is rarely the person who should be able to erase the whole fleet. Roles give each teammate exactly the access their job needs.

Where roles fit with safety

Roles are one of several guardrails. Together they mean a busy, well-meaning teammate can't do serious damage by accident.

Erase is deliberate
It needs a typed confirmation and is never available in bulk.
Policy changes preview first
Disruptive changes need an acknowledgement before they publish.
Offboarding never erases
What happens to a leaver's phone is always your choice.

Security and privacy →

Safe by default

Erase needs the device name typedNo accidental wipesOn
No bulk erase, everOne device at a timeOn
Impact preview before publishingYou see who it affectsOn
Nothing erased when an employee leavesYou choose, every timeOn

Related features

Reports & audit log

Android fleet compliance reports: top issues, policy and group breakdowns, Android version and patch age, CSV export and an audit log of admin actions.

Remote actions

Remotely lock, reboot, erase, reset the password or clear app data on any company Android phone from your browser, with bulk actions and honest status.

Security policies

Android security policies in plain English: pick a template, set screen lock, updates, camera, Wi-Fi and encryption, and preview changes before publishing.

Industries

Who uses team & roles

The trades that lean on this feature most, each with its own scenario and recommended policy.

Transportation

In-cab tablets that run the route app and nothing else.

In-cab tablets locked to the dispatch or ELD app, phones that pass between drivers at shift change, and a missing tablet in the depot that you can lock from the office.

See every industry →

From the blog

Set up team & roles, step by step

Guide · Setup and accessRoles and permissionsExactly what Owners, Admins, Operators and Viewers can see and do in NounDesk, area by area.Guide · Setup and accessInvite adminsGive a colleague access to NounDesk: send an invitation, choose their role, and later change or remove their access.Guide · Setup and accessOrganization settings and adminsManage your NounDesk organization: the Google connection, demo mode, defaults for new devices, and inviting admins with the right role.

Browse the full user guide →

Team & roles: questions answered

Who should be an Operator?

Whoever hands out phones and fields "my phone is frozen" calls: an office manager, a dispatcher, a shift lead. They can enroll, assign, lock and reboot, and they cannot erase anything or change a policy.

Can a Viewer download reports?

Yes. Viewer is read-only, which includes reading reports and downloading CSVs. It is the right role for an accountant or an outside IT consultant.

Is there two-factor authentication for administrators?

Not yet. It is on the roadmap. Today, protect administrator accounts with strong, unique passwords.

Can there be more than one Owner?

Yes. Owners can promote other team members to Owner.

Ten phones. Ten minutes. Protected.

Start a 14-day free trial, no card required. Or load a sample fleet in demo mode first.

Start free Sign up and try demo mode