User Guide: Admin Tab

Predefined Roles

BlueFletch provides organization-level predefined roles which can be assigned to any organization user. It also provides one role with system-level permissions, which can be assigned to a BlueFletch team member (must have a user account with an email domain of @bluefletch.com) to support the organization if desired. Each of these roles is added automatically when the organization is created, and none can be edited.

These roles can be assigned to a user on the BlueFletch Portal Roles page while creating or editing a role, or from the Users page.

Role Name	Permissions	Description
Admin	All organization-level permissions.	Organization Administrator role. "Admin" role has access to view and manage all the organization's features.
BlueFletch Role	Admin Organization Manage, Admin Roles Manage, Admin User Manage, Audit Log View, Launcher Notification Test, Support Dashboard Explorer, Support Dashboard Manage, System Dashboard Manage, System Download Beta View, System Download Manage, System EMM Manage	A role that allows BlueFletch personnel to support the organization.
EMM Admin	EMM Device Manage, EMM Enterprise Manage, EMM Policy Manage, EMM Policy Token Manage, Admin Download View, Admin Files Manage, Support Dashboard View	A role to allow for managing EMM Console settings.
EMM User	EMM Device View, EMM Enterprise View, EMM Policy Token View, EMM Policy View, Support Dashboard View	A role to allow viewing EMM Console settings.
IP Address Management	IP Addres Allow List Manage	A role that allows for management of the Device Allowed IP Addresses.
Key Management	API Key Management	A role that allows for management of the Device and API keys. This role requires additional role(s) in order to access Portal. The permission Admin Organization View is required at minimum.
Launcher Admin	Admin Sites Manage, Launcher Config Manage	A role that allows for managing Launcher and Site Configurations.
Launcher User	Admin Sites View, Launcher Config View	A role that allows for viewing Launcher and Site Configurations.
Playbook Admin	MDM Device Manage, MDM Playbook Manage, MDM Play Manage, MDM Deployment Group Manage, Admin Playbook Agents View, Admin Download View, Admin Files Manage, Support Dashboard View	A role to allow for managing Playbook settings.
Playbook User	MDM Device View, MDM Playbook View, MDM Play View, MDM Deployment Group View, Support Dashboard View	A role to allow viewing Playbook settings.
Support Analyst	Support Dashboard Explorer, Support Dashboard Manage	A role that allows exploring Support Analytic data.
User	Support Dashboard View, Support Report View	Organization user role for basic access.