MicroStrategy ONE

Manage Admin Roles

The person who initially configures MicroStrategy Identity is assigned the following administrative role(s):

  • For on-premises implementations, you have administrator privileges for the MicroStrategy Identity environment.
  • For MicroStrategy Cloud implementations, you have administrator privileges for the MicroStrategy Identity environment, and Network Administrator privileges for the initial Identity Network.

Assign Admin Roles

As an administrator, you can assign roles to other users:

  • Master Network Administrator - This role provides the same privileges as the Network Administrator role but cannot be deleted without confirmation.

    When you create a MicroStrategy Identity Network, the first account created for that network is automatically the Master Network Administrator. These accounts are not linked to external directories or identity management systems so they cannot be accidentally deleted. To guarantee system configurability and management, there must always be at least two Master Network Administrator accounts active before any can be deleted. Up to five users can be designated as Master Network Administrators.

  • Network Administrator — provides full privileges for managing Identity Networks.
  • MicroStrategy Communicator Analyst — provides access to the MicroStrategy Communicator mobile app.
  • Help Desk Specialist — provides limited access for managing Identity networks. This role is typically assigned to support personnel who troubleshoot user issues.
  • Approval - allows the review and approval of the issuance of badges for new users, as well as the reactivation of previously revoked badges for existing users, prior to sending badge invitations.

The following table lists the privileges associated with each role.

Privileges

Network Administrator

MicroStrategy Communicator Analysts

Help Desk Specialists

 Approval
• Create Identity Networks
• Add, edit, and revoke users
• Edit badge design
• Enable location tracking and set badge security conditions
• Configure the systems, applications, and physical resources that members of the network can access
• Grant and revoke Network Administrator privileges for other users
• Perform all Network Administrator duties
• Delete networks
• Use MicroStrategy Communicator to discover and communicate with users in your Identity Network
• Analyze MicroStrategy Badge activity
• Configure the systems, applications, and physical resources that members of the network can access
• Edit badge design
• Add, edit, and revoke users
• Revoke devices
• Approve or deny badge issuance to new users.
• Reactivate previously-revoked badges for existing users.

To Assign Roles to Users

  1. Log into MicroStrategy Identity Manager.
  2. Click Users & Badges.
  3. Under Role Management, click Manage Admin Roles.
  4. If necessary, from the All Roles pull-down menu, select the roles that you want to assign or revoke.
  5. Locate the user to which you want to assign or revoke roles. Use the Search Users field to find a specific user.
  6. To assign roles, select the check box for each role that you want to add to the user.
    To revoke roles, clear the check box for each role that you want to remove from the user.

    A red dot under a check box indicates a change of assignment.

    You cannot remove the Network Administrators role from the user that created the network.

  1. Repeat steps 5 and 6 for each user that you want to assign or revoke roles.
  2. Click Apply.
  3. Review the changes and click Save.