Access roles and rights for portal administrators

Information about access roles and access rights for MaaS360® Portal administrators.

Table 1. Access roles for portal administrators
Role Description
Read-Only The Read-Only role provides view-only access to all devices, policies, and applications.

The Read-Only role also allows the administrator to view reports, My Alert Center, devices, policies, and the Action History report in the MaaS360 system.
Help Desk The Help Desk role provides the administrator with access rights to perform Help Desk device management actions that include locating a device, sending messages or alerts to the device, locking a device, or resetting a device passcode.

The Help Desk role also allows the administrator to view My Alert Center, view policies and reports, manage device enrollments, edit device views, and manage remote control and help desk actions.
Administrator The Administrator role includes access rights for the Read-Only role and manages devices.

The Administrator role allows the administrator to view My Alert Center, view reports and policies, manage device enrollments, edit device views, manage policies, manage remote control, wipe data on a mobile device, send messages to devices, and manage device deactivation.
Administrator Level 2 The Administrator Level 2 role provides the administrator with complete device management access rights that includes creating and managing policies and applications.

The Administrator Level 2 role also allows the administrator to view reports and My Alert Center, manage device enrollments, manage device view bulk updates, define custom attributes, manage MaaS360 Cloud Extenders, manage group level actions, and view and publish policies in MaaS360.
MaaS360 Service Administrator The MaaS360 Service Administrator role provides the administrator with top-level Administrator level access rights to configure services and manage administrator accounts.

The MaaS360 Service Administrator role also allows the administrator to view reports and Alert Center notifications, manage device enrollments, manage device view bulk updates, define custom attributes, manage MaaS360 Cloud Extenders, manage group level actions, publish policies, and configure services.
Partner Administrator The MaaS360 Partner Administrator role onboards partners and customers, and performs customer account actions that include extending trial accounts that are expiring and converting trial accounts to customer accounts.

Note: The new Partner Administrator Account Actions Control access right controls the visibility of certain actions on the Administrator Settings page in the MaaS360 Portal. For more information, see Account Actions Control access right for Partner Administrators.
Table 2. Access rights for portal administrators
Role Right to access Category Description
Administrator Apps - Read only App Distribution View-only access to apps.
Action History Device Management View global action history across all devices.
Buzz Device Device Management Buzz a device through a Device View action.
Change Compliance Rule Set Device Management Change a compliance rule set through a Device View action.
Change Device Policy Device Management Change a device policy through a Device View action.
Change Expense Mgmt Plan Device Management Change a mobile expense management plan through a Device View action.
Deactivate Device Device Management Remove MDM control or hide devices through a Device View action.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device View - Read only Device Management View-only access to the Device View (no actions).
Distribute App for a device Device Management Distribute an app through a Device View action.
Distribute Doc for a device Device Management Distribute a doc through a Device View action.
Enable Alerts Device Management Enable alerts for enterprise customers.
Locate Device Device Management Locate a device through a Device View action.
Lock Device Device Management Lock a device through a Device View action.
Manage Device Enrollments Device Management Manage device enrollment requests.
Merge Duplicate Device Records Device Management Manually merge Android or Windows Phone 7 device records if automated merge cannot identify the devices to merge.
Refresh Device Information Device Management Issue an on-demand refresh for all information about the device through a Device View action.
Reset Device Passcode Device Management Reset the device passcode through a Device View action.
Selective Wipe Device Management Selectively wipe (restrict) corporate data from a device and revoke the selective wipe from a device through a Device View action.
Send Message Device Management Send a message to a device through a Device View action.
Set Custom Attribute Value Device Management Set custom attribute values through a Device View action.
User Views - Generate Password Device Management Generate passwords for users through the View All Users workflow.
Users - Read only Device Management View-only access to the User View.
View Custom Attributes Device Management View-only access to custom attributes.
Wipe Device Device Management Wipe the device or cancel pending wipe action through a Device View action.
Docs - Read only Doc Distribution View-only access to docs.
Manage Document Settings Doc Distribution Modify document settings.
Expense Mgmt Plans - Read only Expense Management View-only access to the expense management plans.
Mobile Metrics - View and Propose new ideas Mobile Analytics View-only access to Mobile Metrics graphs and the ability to propose new ideas.
Manage Policies - Read only Policy Management View-only access to policies.
Reports Reports View graphs and reports in the Reports tab.
Administrator - Level 2 Manage Apps App Distribution Add, change, or delete apps.
Action History Device Management View a global action history across all devices.
Bulk Upload Custom Attributes Device Management Upload a file in bulk to set custom attributes.
Buzz Device Device Management Buzz a device through a Device View action.
Change Compliance Rule Set Device Management Change a compliance rule set through a Device View action.
Change Device Policy Device Management Change a device policy through a Device View action.
Change Expense Mgmt Plan Device Management Change a mobile expense management plan through a Device View action.
Deactivate Device Device Management Remove MDM control or hide devices through a Device View action.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device Group actions Device Management Push actions at a group level.
Device View - Read only Device Management View-only access to the Device View (no actions).
Distribute App for a device Device Management Distribute an app through a Device View action.
Distribute Doc for a device Device Management Distribute a doc through a Device View action.
Enable Alerts Device Management Enable alerts for enterprise customers.
Locate Device Device Management Locate a device through a Device View action.
Lock Device Device Management Lock a device through a Device View action.
Manage Cloud Extenders Device Management Manage Cloud Extenders.
Manage Custom Attributes Device Management Add, change, or delete custom attributes.
Manage Device Enrollments Device Management Manage device enrollment requests.
Merge Duplicate Device Records Device Management Manually merge Android or Windows Phone 7 device records if automated merge cannot identify the devices to merge.
Refresh Device Information Device Management Issue an on-demand refresh for all information about the device through a Device View action.
Remove App Device Management Remove an app through a Device View action.
Reset Device Passcode Device Management Reset the device passcode through a Device View action.
Selective Wipe Device Management Selectively wipe (restrict) corporate data from a device and revoke the selective wipe from a device through a Device View action.
Send Message Device Management Send a message to a device through a Device View action.
Set Custom Attribute Value Device Management Set custom attribute values through a Device View action.
User Views - Generate Password Device Management Generate passwords for users through the View All Users workflow.
Users - Read only Device Management View-only access to the User View.
Wipe Device Device Management Wipe the device or cancel a pending wipe action through a Device View action.
Manage Docs Doc Distribution Add, change, or delete docs.
Manage Document Settings Doc Distribution Modify document settings.
Manage Expense Mgmt Plans Expense Management Add, change, or delete expense management plans.
Mobile Metrics - View and Propose new ideas Mobile Analytics View-only access to Mobile Metrics graphs and the ability to propose new ideas.
View Mobile Insights Mobile Analytics View-only access to Mobile Insights on MaaS360 Portal Home page.
Manage Policies Policy Management Add, change, delete, or publish policies.
Reports Reports View graphs and reports in the Reports tab.
Help Desk Apps - Read only App Distribution View-only access to apps.
Action History Device Management View global action history across all devices.
Buzz Device Device Management Buzz a device through a Device View action.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device View - Read only Device Management View-only access to the Device View (no actions).
Enable Alerts Device Management Enable alerts for enterprise customers.
Locate Device Device Management Locate a device through a Device View action.
Lock Device Device Management Lock a device through a Device View action.
Manage Device Enrollments Device Management Manage device enrollment requests.
Merge Duplicate Device Records Device Management Manually merge Android or Windows Phone 7 device records if automated merge cannot identify the devices to merge.
Refresh Device Information Device Management Issue an on-demand refresh for all information about the device through a Device View action.
Reset Device Passcode Device Management Reset the device passcode through a Device View action.
Send Message Device Management Send a message to a device through a Device View action.
Set Custom Attribute Value Device Management Set custom attribute values through a Device View action.
User Views - Generate Password Device Management Generate passwords for users through the View All Users workflow.
Users - Read only Device Management View-only access to the User View.
Docs - Read only Doc Distribution View-only access to docs.
Manage Document Settings Doc Distribution Modify document settings.
Expense Mgmt Plans - Read only Expense Management View-only access to the expense management plans.
Mobile Metrics - View and Propose new ideas Mobile Analytics View-only access to Mobile Metrics graphs and the ability to propose new ideas.
Manage Policies - Read only Policy Management View-only access to policies.
Reports Reports View graphs and reports in the Reports tab.
Read Only Apps - Read only App Distribution View-only access to apps.
Action History Device Management View global action history across all devices.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device View - Read only Device Management View-only access to the Device View (no actions).
Enable Alerts Device Management Enable alerts for enterprise customers.
Refresh Device Information Device Management Issue an on-demand refresh for all information about the device through a Device View action.
Users - Read only Device Management View-only access to the User View.
Docs - Read only Doc Distribution View-only access to docs.
Manage Document Settings Doc Distribution Modify document settings.
Expense Mgmt Plans - Read only Expense Management View-only access to the expense management plans.
Mobile Metrics - View and Propose new ideas Mobile Analytics View-only access to Mobile Metrics graphs and the ability to propose new ideas.
Manage Policies - Read only Policy Management View-only access to policies.
Reports Reports View graphs and reports in the Reports tab.
Service Administrator Manage Administrator Roles Administrator Management Create and manage roles and administrators.
Manage Apps App Distribution Add, change, or delete apps.
Bulk Upload Custom Attributes Device Management Upload a file in bulk to set custom attributes.
Buzz Device Device Management Buzz a device through a Device View action.
Change Compliance Rule Set Device Management Change a compliance rule set through a Device View action.
Change Device Policy Device Management Change a device policy through a Device View action.
Change Expense Mgmt Plan Device Management Change a mobile expense management plan through a Device View action.
Deactivate Device Device Management Remove MDM control or hide devices through a Device View action.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device Group actions Device Management Push actions at a group level.
Device View - Read only Device Management View-only access to the Device View (no actions).
Distribute App for a device Device Management Distribute an app through a Device View action.
Distribute Doc for a device Device Management Distribute a doc through a Device View action.
Enable Alerts Device Management Enable alerts for enterprise customers.
Locate Device Device Management Locate a device through a Device View action.
Lock Device Device Management Lock a device through a Device View action.
Manage Cloud Extenders Device Management Manage Cloud Extenders.
Manage Custom Attributes Device Management Add, change, or delete custom attributes.
Manage Device Enrollments Device Management Manage device enrollment requests.
Merge Duplicate Device Records Device Management Manually merge Android or Windows Phone 7 device records if automated merge cannot identify the devices to merge.
Refresh Device Information Device Management Issue an on-demand refresh for all information about the device through a Device View action.
Remove App Device Management Remove an app through a Device View action.
Reset Device Passcode Device Management Reset the device passcode through a Device View action.
Selective Wipe Device Management Selectively wipe (restrict) corporate data from a device and revoke the selective wipe from a device through a Device View action.
Send Message Device Management Send a message to a device through a Device View action.
Set Custom Attribute Value Device Management Set custom attribute values through a Device View action.
User Views - Generate Password Device Management Generate passwords for users through the View All Users workflow.
Users - Read only Device Management View-only access to the User View.
Wipe Device Device Management Wipe the device or cancel a pending wipe action through a Device View action.
Manage Docs Doc Distribution Add, change, or delete docs.
Manage Document Settings Doc Distribution Modify document settings.
Manage SharePoint Settings Doc Distribution Modify SharePoint settings.
Manage licenses License Management Change licenses assigned to a device, perform actions such as bulk assignment, bulk revoke, view bulk license history, and change device entitlements from the Device view page.
View license reports License Management View and download license usage reports.
Mobile Metrics - View and Propose new ideas Mobile Analytics View-only access to Mobile Metrics graphs and the ability to propose new ideas.
View Mobile Insights Mobile Analytics View-only access to Mobile Insights on MaaS360 Portal Home page.
Manage Policies Policy Management Add, change, delete, or publish policies.
Reports Reports View graphs and reports in the Reports tab.
Convert to Customer Service Configuration Restrict the visibility of the account as Convert to Customer.
Expire Account Service Configuration Restrict the visibility of the account as Expire Account.
Extend Trial Service Configuration Restrict the visibility of the account as Extend Trial.
Read-Only Account Service Configuration Restrict the visibility of the account as Read-Only Account.
Services Configuration Service Configuration Enable extra services with a checklist workflow.
Partner Administrator Delete Button Control Account Management Control visibility of delete action for an account.
Move and rename Action Control Account Management Control visibility of move and rename actions for an account.
View Admin Audit Reports Admin Audit Reports Ability to view audit reports for changes made by administrators on the portal.
Manage Administrator Roles Administrator Management Create and manage roles and administrators.
Define App Approval Process Administrator Management Define or edit the app approval process.
Manage App Approvals Administrator Management Manage app approvals.
View App Approval Process Administrator Management View the app approval process.
Apps - Read-only App Distribution View-only access to apps.
Distribute Apps App Distribution Distribute apps.
Manage Apps Only No Distribution App Distribution Allow access to manage apps, but cannot distribute apps.
Manage Apps App Distribution Add, change, or delete apps.
App Attributes - All Access App Management Allows a user to manage custom attributes.
Installed Apps - Read-only App Management Allows a user to view the installed apps workflow.
Web Services App Management Allows user to set Web Services parameters.
Web Services - Read-only App Management View-only access to Web Services parameters.
Action History Device Management View a global action history across all devices.
Approve Device Device Management Approve a blocked or quarantined device (ActiveSync/Traveler).
Block Device Device Management Block an approved or quarantined device (ActiveSync/Traveler).
Bulk Upload Custom Attributes Device Management Upload a file in bulk to set custom attributes.
Buzz Device Device Management Buzz a device through a Device View action.
Change Compliance Rule Set Device Management Change a compliance rule set through a Device View action.
Change Device Policy Device Management Change a device policy through a Device View action.
Change Expense Mgmt Plan Device Management Change a mobile expense management plan through a Device View action.
Deactivate Device Device Management Remove MDM control or hide devices through a Device View action.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device Group actions Device Management Push actions at a group level.
Device View - Read only Device Management View-only access to the Device View (no actions).
Distribute App for a device Device Management Distribute an app through a Device View action.
Distribute Doc for a device Device Management Distribute a doc through a Device View action.
Enable Alerts Device Management Enable alerts for enterprise customers.
Locate Device Device Management Locate a device through a Device View action.
Lock Device Device Management Lock a device through a Device View action.
Manage Cloud Extenders Device Management Manage Cloud Extenders.
Manage Custom Attributes Device Management Add, change, or delete custom attributes.
Manage Device Enrollments Device Management Manage device enrollment requests.
Merge Duplicate Device Records Device Management Manually merge Android or Windows Phone 7 device records if automated merge cannot identify the devices to merge.
Refresh Device Information Device Management Issue an on-demand refresh for all information about the device through a Device View action.
Remove App Device Management Remove an app through a Device View action.
Reset Device Passcode Device Management Reset the device passcode through a Device View action.
Selective Wipe Device Management Selectively wipe (restrict) corporate data from a device and revoke the selective wipe from a device through a Device View action.
Send Message Device Management Send a message to a device through a Device View action.
Set Custom Attribute Value Device Management Set custom attribute values through a Device View action.
User Views - Generate Password Device Management Generate passwords for users through the View All Users workflow.
Users - Read only Device Management View-only access to the User View.
Wipe Device Device Management Wipe the device or cancel a pending wipe action through a Device View action.
Distribute Docs Doc Distribution Ability to distribute Docs
Docs - Read-only Doc Distribution View only access to Docs.
Manage Docs Doc Distribution Add, change, or delete docs.
Manage Document Settings Doc Distribution Modify document settings.
Manage SharePoint Settings Doc Distribution Modify SharePoint settings.
On Premise Content Sync Document Management Configure the On Premise Content Sync Storage URL and the Tenant account.
Expense Mgmt Plans - Read-only Expense Management Plans View-only access to the expense management plans.
Manage Expense Mgmt Plans Expense Management Plans Add, change, or delete the expense management plans.
Manage Policies Policy Management Add, change, delete, or publish policies.
Reports Reports View graphs and reports in the Reports tab.
Convert to Customer Service Configuration Restrict the visibility of the account as Convert to Customer.
Expire Account Service Configuration Restrict the visibility of the account as Expire Account.
Extend Trial Service Configuration Restrict the visibility of the account as Extend Trial.
Read-Only Account Service Configuration Restrict the visibility of the account as Read-Only Account.
Services Configuration Service Configuration Enable extra services with a checklist workflow.
Manage Apps App Distribution Add, change, or delete apps.
Buzz Device Device Management Buzz a device through a Device View action.
Change Compliance Rule Set Device Management Change a compliance rule set through a Device View action.
Change Device Policy Device Management Change a device policy through a Device View action.
Change Expense Mgmt Plan Device Management Change a mobile expense management plan through a Device View action.
Deactivate Device Device Management Remove MDM control or hide devices through a Device View action.
Device Enrollments - Read only Device Management View-only access to device enrollment requests.
Device Group actions Device Management Push actions at a group level.
Device View - Read-only Device Management View only access to Device View (no actions).
Device View-View All Devices Device Management Device View access restricted to View All Devices (no access to actions or smart search).
Distribute App for a device Device Management Distribute an app through a Device View action.
Distribute Doc for a device Device Management Distribute a doc through a Device View action.
Distribute patches for a device Device Management Distribute patches for a device
EFOTA - Complete Access Device Management Read and write to EOFTA workflow.
Enable Lost Mode Actions Device Management View Lost Mode actions.
Enable Watchlist Device Management Enable a Watchlist for Enterprise Customers.
Enable-Disable Debug Mode Device Management Manage debug mode.
Exit Kiosk Mode Device Management Exit Kiosk mode on the device.
FileVault Recovery Access Right Device Management Check the FileVault recovery key.
Install MDM App Device Management Install the MDM app through a Device View action.
Manage Bulk Enrollments For Android Device Management Access the Android Configurator tab under Manage Enrollment Requests.
Programmer Mode Device Management Execute enter and exit programmer mode actions.
Push OS patches to Test devices Device Management Deploy patches to only test devices.
Push OS patches to all devices Device Management Deploy patches to both test and production devices.
Remote Control Device Management Use Remote Control on an end user device (Windows devices only).
Remote Control - Configure settings Device Management Configure applications that are used with Remote Control.
Remote Control device Device Management View and manage a device with Remote Control.
Remote Session Device Management View a remote session.
Allow Bulk Edit of Policies   View, edit, bulk edit, or publish policies.
Configure Email Settings   Manage end user email messages.