{"_id":"56abde024e4b730d009eb11a","category":{"_id":"56abdd81d4432d1900eed235","__v":6,"version":"569f9cf6650e1d1900f96b5e","pages":["56abddd30b9e0b0d006162b1","56abde024e4b730d009eb11a","56abe05f678b58170031ec46","56ad2053d21f1b0d00fd2f82","56ad2a922a7860170013f70d","56ad2b663fc1020d009776da"],"project":"569f9cf6650e1d1900f96b5b","sync":{"url":"","isSync":false},"reference":false,"createdAt":"2016-01-29T21:45:37.383Z","from_sync":false,"order":2,"slug":"introduction","title":"Introduction"},"githubsync":"","user":"5582e90181672a3900bb4fc7","project":"569f9cf6650e1d1900f96b5b","version":{"_id":"569f9cf6650e1d1900f96b5e","project":"569f9cf6650e1d1900f96b5b","__v":12,"createdAt":"2016-01-20T14:43:02.785Z","releaseDate":"2016-01-20T14:43:02.785Z","categories":["569f9cf7650e1d1900f96b5f","56abdd81d4432d1900eed235","56abe0558beeff0d003b8118","56ad2f8b1c09150d00a183a8","56ad4e1cd21f1b0d00fd2f97","56b00ad88f7a4f0d0029dc92","56b2432e9621f20d00efb2bd","56b25826147e900d00d6497a","56b7af2a4b372d2100722c48","56b8c4d938b1070d0028920f","56b8cdab14feef0d0082415d","58599813cf9e112d0032cdab"],"is_deprecated":false,"is_hidden":false,"is_beta":false,"is_stable":true,"codename":"","version_clean":"1.0.0","version":"1.0"},"__v":4,"parentDoc":null,"updates":[],"next":{"pages":[],"description":""},"createdAt":"2016-01-29T21:47:46.901Z","link_external":false,"link_url":"","sync_unique":"","hidden":false,"api":{"results":{"codes":[]},"settings":"","examples":{"codes":[]},"auth":"required","params":[],"url":""},"isReference":false,"order":1,"body":"The actions that a user is allowed to perform are specified by the **role** that is\nassigned to that user. A role is a named set of permissions that allows a user\nto perform some set of actions.\n\nThe administrator roles are:\n\n## Company administrator \n\nPerforms all functions of a domain administrator in all domains\nwithin their company, and can edit their company information and suspend\naccounts. They can also add or remove domains and create and assign\nadministrators, including Company mail, Company read only, and Company\nview admins.\n\n## Company mail\n\nCan view and edit non-billable mailbox settings, cannot create or delete\nmailboxes or edit domain settings.\n\n## Company read only\n\nCan view everything that a company administrator can, but does\nnot have the ability to make changes.\n\n## Company token only\n\nCan generate SSO (Single Sign On) tokens for users in any domains in their company. This is\ntheir only responsibility; they cannot view or change settings for domains or\nusers.\n\n## Company view\n\nCan view all domains in the company, and can make non-billable changes\nto mailboxes and domains, but does not have the ability to create or delete\nmailboxes or domains.\n\n## Domain administrator\n\nPerforms all functions of a workgroup administrator. In addition, they can add\nor remove workgroups and workgroup administrators as well as manage their\ndomain. If you enable Mailbox Admin in the Branding tool, Domain\nAdministrators can also create and edit mailbox accounts through the\nWebmail interface.\n\n## Mail administrator\n\nManages mailboxes within the domain for which they are administrators.\nTypical tasks may be changing passwords, setting forwarding, adding or\nremoving nicknames, and setting autoresponders.\n\n## Workgroup administrator\n\nCreates, deletes, and manages mailboxes within the workgroups for which\nthey are administrators.","excerpt":"","slug":"roles","type":"basic","title":"Roles"}
The actions that a user is allowed to perform are specified by the **role** that is assigned to that user. A role is a named set of permissions that allows a user to perform some set of actions. The administrator roles are: ## Company administrator Performs all functions of a domain administrator in all domains within their company, and can edit their company information and suspend accounts. They can also add or remove domains and create and assign administrators, including Company mail, Company read only, and Company view admins. ## Company mail Can view and edit non-billable mailbox settings, cannot create or delete mailboxes or edit domain settings. ## Company read only Can view everything that a company administrator can, but does not have the ability to make changes. ## Company token only Can generate SSO (Single Sign On) tokens for users in any domains in their company. This is their only responsibility; they cannot view or change settings for domains or users. ## Company view Can view all domains in the company, and can make non-billable changes to mailboxes and domains, but does not have the ability to create or delete mailboxes or domains. ## Domain administrator Performs all functions of a workgroup administrator. In addition, they can add or remove workgroups and workgroup administrators as well as manage their domain. If you enable Mailbox Admin in the Branding tool, Domain Administrators can also create and edit mailbox accounts through the Webmail interface. ## Mail administrator Manages mailboxes within the domain for which they are administrators. Typical tasks may be changing passwords, setting forwarding, adding or removing nicknames, and setting autoresponders. ## Workgroup administrator Creates, deletes, and manages mailboxes within the workgroups for which they are administrators.