Roles

Administration roles divide security administration by responsibility level. Sophos Central Partner includes several predefined roles.

You can't edit or delete these roles. A role is the access level for an administrator. The options are Partner Super Admin, Partner Admin, Partner Help Desk, Partner Read-only or Partner Business Admin. You can have multiple administrators with the same role.

Custom roles

A Partner Super Admin can also add custom roles. These roles are based on the predefined roles, but you can restrict the access for a custom role to a specific product. See Add a custom role.

A Partner Super Admin can also delete custom roles. See Delete custom role.

Partner Super Admin

There must be at least one administrator with a Partner Super Admin role.

Administrators with this role have access to everything in Sophos Central Partner and Sophos Central Admin.

They can also do the following:

• Add and remove administrators.

  If you're a Partner Super Admin, you can't remove yourself.

• Assign and update roles for administrators.

• Choose the customers that the other administrators are allowed to access.
• Create, edit, assign and delete custom roles.
• Manage licenses.
• Start trials.
• Create monthly accounts.
• Manage global templates.
• Reset the multi-factor authentication/PIN.
• Manage alert emails for your customers.
• Manage customer groups.

Partner Admin

Administrators with this role have access to everything in Sophos Central Partner and Sophos Central Admin.

They can also access their designated customer accounts.

They don't have the additional Partner Super Admin capabilities. For example, they can't add and update roles for administrators.

Partner Help Desk

Administrators with this role have read-only access for all settings in Sophos Central Partner and Sophos Central Admin.

They can also do the following:

• Access their designated customer accounts.
• Look at sensitive logs or reports.
• Receive alerts.
• Mark alerts as resolved if they go to Alerts from the dashboard. They can't mark alerts as resolved on individual devices.
• Update the Sophos agent software on a computer.
• Scan computers.
• Change co-branding in Sophos Central Partner and for their customers in Sophos Central Admin.

Partner Read-only

Administrators with this role have read-only access for all settings in Sophos Central Partner and Sophos Central Admin.

They can also do the following:

• Access their designated customer accounts.
• Look at sensitive logs or reports.
• Receive alerts.

Partner Business Admin

Administrators with this role have access to licensing in Sophos Central.

They can also manage licenses for all customers and trials.