What each user authority can do

summary

In the user permission settings, select one of the following permissions for each user

account privilege manager

account administrator

account member

Users can perform the operations allowed for each privilege.
This page summarizes the functions for which "permitted operations" differ according to each authorization.

Authority to operate various resources

Permissions to operate on various resources, such as ETL Configuration and Data Mart Configuration, are managed by the Team function.
Please note that this is a different management method than permissions on accounts.
However, only account privileged administrators may operate resources for which they have not been granted roles.

User Management

Operating privileges for user management.

Operation³ Authority	account privilege manager	account administrator	account member
Viewing user management screens	✓	✓	✓
Edit permission settings for each user	✓	✓	-
Disable two-factor authentication set by other users	✓	-	-
User Invitation	✓	✓	-
Deleting Users	✓	-	-

Account Security

Operating privileges for account security.

Scope of influence of account security settings

All settings on the Account Security screen apply to the entire account.
Please be careful when making changes, as they will affect all users in your account.

Operation³ Authority	account privilege manager	account administrator	account member
Viewing data preview deletion	✓	✓	-
Enable/disable deletion of data preview	✓	✓	-
View SSO using SAML authentication	✓	✓	-
Enable/disable SSO using SAML authentication	✓	✓	-
View Allowed IP Addresses	✓	✓	✓
Add, edit, or delete Allowed IP Addresses	✓	✓	-

Organization Name Setting

Operational permissions for the organization name.

Operation³ Authority	account privilege manager	account administrator	account member
View Organization Name	✓	✓	✓
Change of organization name	✓	-	-

team

Operating privileges for the team.

Operation³ Authority	account privilege manager	account administrator	account member
Viewing the Team List screen	✓	✓	✓
Create a team	✓	✓	-
Edit or delete teams that have not been granted roles	✓	-	-

Permission to edit or delete team

In order to edit or delete a team, a role for that team is required.
See team for details.
However, only account privileged administrators may edit or delete even teams to which they have not been granted roles.

Resource Group

Permission to operate on Resource Group.

Operation³ Authority	account privilege manager	account administrator	account member
Viewing the Resource Group List screen	✓	✓	✓
Creating Resource Groups	✓	✓	-
Edit or delete Resource Groups that have not been granted roles	✓	-	-

Permission to edit and delete Resource Groups

In order to edit or delete a Resource Group, a role for that Resource Group is required.
See Resource Group for more information.
However, only account privileged administrators may edit or delete Resource Groups even if they have not been granted the role.

Notification to

The operating authority for the recipient.

Operation³ Authority	account privilege manager	account administrator	account member
Creating Notification Addresses	✓	✓	-
Edit or delete a notification address	✓	✓	-
Use of Notification Destination in Notification Settings	✓	✓	✓