Secure Partner Access permissions

This topic describes the permissions that you can add to your partner admin role.

Select the correct resource types to view user accounts and apps. For example, by including the Users and Applications resource types in your realm's resource, you can see the users within that realm, the app itself, and the users in the realm who are assigned to the app. See Create a resource set.

Permissions Description
Manage users Gives your delegated partner admins the ability to perform the following actions:
  • Edit user's lifecycle states
  • View users*
  • Edit users' authenticator operations
  • Edit users' profile attributes*
  • Edit users' app assignments
  • Create users

    Partner admins with create user privileges can set values for required custom attributes during user creation.

  • Edit user's group membership
Manage groups

Gives your delegated partner admins the ability to view groups and manage group membership.
View realms Gives your delegated partner admins the ability to view realms.
Manage apps Gives your delegated partner admins the ability to view the app and edit an app's user assignments
View policies Gives your delegated partner admins the ability to view policies.

* Permissions grant access to the Last name, First name, Username, Primary email, Secondary email, Primary phone, Mobile phone, and Middle name profile attributes only.

Related topics

Manage Secure Partner Access

Set up partner admins for Secure Partner Access

Permission conditions