Roles & Permissions

TABLE OF CONTENTS

• Asset Admin Group
• Asset Editor Group
• Asset Reader Group
• Asset Manager Scope

Asset Management has its own three Authorization Groups, configured the same way as the Admin Group: assign one existing Active Directory or Entra ID Group to each Setting below.

Asset Admin Group

Members of this Group have full access to Asset Management: all Hardware Assets, Configuration Items, Master Data (Category, Model, Company, Country, Location, Room), Billing and Settings.

Asset Editor Group

Members of this Group can create and edit Assets and Master Data, but cannot change Asset Management Settings.

See Asset Manager Scope below to limit an Editor to only the Assets of their own Location or Company

Asset Reader Group

Members of this Group can view Assets and Master Data, without the ability to create, edit or delete anything.

Asset Manager Scope

Enable this Setting to restrict an Asset Editor to only the Assets of the Companies, Locations, Rooms and Cost Centers where they are set as the Asset Manager (either directly as a User, or as a member of the configured Asset Manager Group). Without this Setting, an Asset Editor can manage every Asset regardless of Company, Location, Room or Cost Center.

The Asset Manager field (User and/or Group) is set per Company, Location and Room — see our Company, Location and Room Articles. Cost Center also supports an Asset Manager and will be covered in the Billing & Cost Centers section.

Catalog Master Data such as Model, Category, Country, Status, Configuration Item and User is NOT scoped by Asset Manager — it is always visible to every Asset Editor.