Predefined Roles

The Controller Tenant UI includes predefined roles for administrators and read-only users that you cannot change, however, you can create new custom roles.


Roles	Permissions
Account Owner	Access to Administration, Agent, and Getting Started Wizard UIs. Add or edit users, groups, roles, and the authentication provider. Possesses most of the account-level permissions and is sometimes known as the account administrator. See Account Permissions and Account Permissions for On-Premises. Create War Rooms. Configure alert, email, and HTTP request templates, emails, reports, and licenses. View licenses, business flows, and reports.
Administrator	View and modify components that change state, such as applications, business transactions, dashboards, and so on. Create War Rooms, view business flows, and view and configure scheduled reports. Cannot add or edit users, groups, or roles.
Analytics Administrator	View and grant access to Analytics features, such as creating API keys, creating metrics, creating extracted fields, and granting access for viewing analytics data. Controls which roles have access to specific applications or log source types. The only role in charge of saved searches. Saved searches provide different data access levels to analytics users. See Analytics and Data Security and Transaction Analytics Permissions.
Applications and Dashboards Viewer	View all applications and their dashboards. Cannot edit dashboards (formerly known as the Read-Only User).
Dashboards Viewer	View application dashboards.
DB Monitoring User	Manage Events. View the Database Monitoring UI. Cannot add, edit, or delete database collectors.
DB Monitoring Administrator	View the Database Monitoring UI. Add, edit or delete database collectors.
Server Monitoring Administrator	View the Server Monitoring UI. Configure Service Monitoring features including Service Availability Monitoring.
Server Monitoring User	View Server Monitoring UI. Cannot configure Server Monitoring features.
Workflow Executor	Execute Workflows .