You are here:

About managing administrator roles

Overview

Administrator roles contain privileges that are required to perform management tasks at the project level as well as at the higher instance level.

Blueprint offers default administrator roles for project administration and instance level administration as well as the ability to create custom administrator roles.

Default administrator roles

Within the Instance Admin Editor, Blueprint provides a Default Project Administrator role and a Default Instance Administrator role that contain all privileges to their respective areas, the Project Administration Console and the Instance Administration Console.

Blueprint also provides other default administrator roles with varying privileges, which you can modify.

Default instance administrator roles

You can modify any of the following roles that Blueprint provides for instance administration:

Log Gathering and License Reporting

The administrator can download all instance logs, as well as generate and download the License Report. The administrator can view but not manage the following settings: federated authentication settings, the instance-level print template, active directory integration, email settings and file size settings.
Email, Active Directory, SAML Settings

The administrator can download all instance logs, as well as generate and download the License Report. The administrator can also manage the following: federated authentication settings, the instance-level print template, active directory integration, email settings and file size settings.
Manage Administrator Roles

The administrator can manage all Instance Administrator and Project Administrator roles. This role includes the ability to create new custom roles.
Provision Users

The administrator can provision new users and groups as well as manage existing users and groups.
Provision Projects

The administrator can create new projects and modify existing projects, as well as import and export projects.

Note: An administrator with this role cannot delete projects.
Administer All Projects

The administrator can create new projects and modify all existing projects. The administrator has the full privileges of a default Project Administrator role.

Note: An administrator with this role cannot delete projects.
Assign Instance Administrators

The administrator can create and manage the list of users, as well as assign instance administrator roles to users.

Default project administrator roles

You can modify any of the following roles that Blueprint provides for project administration:

Grant Project Access

The administrator can create project roles and give role assignments to users. The administrator can also create and manage project-level groups.
Manage Project Configuration

The administrator can modify the project details, manage the default print template and Office Document templates, modify comment settings and extract the project XML file.
ALM Target Administrator

The administrator can manage ALM targets and security.

For more information about assigning administrator roles, see Assigning an Instance Administrator role to a user and Assigning a Project Administrator role to a user.

Creating administrator roles

Blueprint provides large and growing enterprises with the ability to create customized administrator roles. Customizing administrator roles limits administrator access to specific areas and privileges. For example, you could create an administrator role that can manage projects but cannot manage users and groups.

The benefits of creating custom administrator roles include:

Preventing unnecessary data loss
Meeting auditing requirements
Isolating potential mistakes by employees

Example

Jesse, a manager, wants to give an employee (Sam, a business analyst) administrative abilities. However, Jesse wants to minimize unintended deletions and project data loss. In order to achieve his goals, Jesse creates a custom instance administrator role with project deletion privileges and assigns it to an administrator in the IT department. Next, Jesse creates a custom instance administrator role with the ability to manage projects and, also, the ability to view users and groups; then he assigns the new custom role to Sam. By creating custom instance administrator roles and assigning them to the appropriate parties, Jesse can maintain security while also achieving his management goals.

Role privileges are generally categorized into access, view, manage, assign, delete and edit actions with access divided into users, groups, projects and instance settings.

Tasks

Creating a new Instance Administrator role

Creating a new Project Administrator role

Learn More

Instance Administration

Project Administration