Role-Based Access Control

With Role-Based Access Control (RBAC), you can assign specific admin roles (Full admin, Policy admin, Support, and Auditor) within your Zivver organization settings, streamlining user management and enhancing security. RBAC helps to improve the efficiency of your administrative processes while safeguarding impactful functionalities & information. On this page you can read all about using RBAC in Zivver for your organization.

Tip

Advanced Administration Bundle
Role-Based Access Control is part of our Advanced Administration Bundle, containing capabilities that larger organizations require while SMBs do not. Please contact your contact person at Zivver or our support team if you are interested in this feature.

Change roles

Follow these steps to set admin roles:

1. Log in to the Zivver WebApp as Full Admin.
   Any existing admin before RBAC was enabled will have the Full Admin role.
2. Click Organization Settings.
3. Expand User administration.
4. Click Accounts.
5. Click Manage next to the account for which you want to change the role.
6. Scroll down to the Account type pane.
7. Select Administrator.
8. Choose a role from the Administrator role dropdown menu.
   
   
9. Click Save.
10. Review and confirm your changes.
    If this account was not an administrator yet and Single Sign-On is enabled, you need to enter a temporary password for the account

Roles

With RBAC, access to the Zivver organization settings can be granted based on four common administrative roles:

• Full admin: Full edit access to all settings and the ability to manage the roles of other admins
• Policy admin: Edit access to all settings, except for the most impactful settings that only need to be configured once, plus access to audit and communication logs
• Support: Edit access to user accounts, but no access to impactful account settings or sensitive data
• Auditor: Read-only access to all settings, no ability to make changes

Warning

Access to sensitive data
To perform tasks for effective Zivver administration, both Full admin and Policy admin must be able to perform actions that can grant access to other users’ message data (such as password resets or delegated access). Keep this in mind when assigning these roles.

Permission overview

In this overview, 📖 indicates View (Read-only) permission and ✏️ indicates Edit (Write) permission for a scope. If no icon is displayed, the role has no permission.

Frequently asked questions