Secure Partner Access permissions

This topic describes the permissions that you can add to your partner admin role.

Early Access release

Permissions Description
Manage users Gives your delegated partner admins the ability to perform the following actions:
  • Edit user's lifecycle states
  • View users*
  • Edit users' authenticator operations
  • Edit users' profile attributes*
  • Edit users' app assignments
  • Create users

    Partner admins with create user privileges can set values for required custom attributes during user creation.

  • Edit user's group membership
Manage groups

Gives your delegated partner admins the ability to view groups and manage group membership.

View realms Gives your delegated partner admins the ability to view realms.
Manage apps Gives your delegated partner admins the ability to view the app and edit an app's user assignments
View policies Gives your delegated partner admins the ability to view policies.

* Permissions grant access to the Last name, First name, Username, Primary email, Secondary email, Primary phone, Mobile phone, and Middle name profile attributes only.

Related topics

Manage Secure Partner Access

Set up partner admins for Secure Partner Access