Roles & Permissions Overview

After you add Messenger managed users and managed teams in the Enterprise Admin Console, you can assign built-in custom admin roles or application managed users.

For custom admin roles, in a large organization, you can delegate administrator roles to other Messenger users by assigning admin roles to those users. You can create custom admin roles by defining a customized set of permissions for that role that you can then assign to a managed user.

For application roles, you can define the sections of Messenger that users can access, such as channels, ability to use messaging, teams, rooms, file attachments, bots, and more.

The following illustration shows an example of the Application Roles page in the Roles & Permissions module in the Enterprise Admin Console.

In This Module

The Roles & Permissions module is comprised of the following pages:

  • Application Roles Page

    On the Application Roles page in the Roles & Permissions module in the Enterprise Admin Console, you can define which features of the Messenger application that specified users can access. For example, you may want a group of users to only be able to access the Messaging application client using a mobile device.

  • Admin Roles Page

    On the Admin Roles page in the Roles & Permissions module, you can add and remove Messenger managed users from the built-in admin role. The built-in Master Admin (Ent Admin) admin role has the same administrative privileges of the Primary Master Admin (Ent Admin) role. The Primary Master Admin role cannot be deleted, but you can transfer the role to another admin user.

  • Custom Roles Page

    On the Custom Roles page in the Roles & Permissions module in the Enterprise Admin Console, you can create, manage, and delete custom admin roles. Custom admin roles enable you to control and provide additional and customizable permission sets to managed users and groups that they can use in-turn to manage other users. A permission set for a custom admin role specifies access to one or more specific parts of the Enterprise Admin Console. For example, you may want a custom admin role to allow a user to add new users, but not allow that role to delete a user.

Next Steps

After managing you user roles and permissions, you may want to review your company list of managed and unmanaged users. For more information, see the Users & Teams Module Overview.