Operator and user roles

  • Last update on July 16th, 2025

User role

This basic role gets automatically assigned whenever a user is created with no specific role. 
Users will only be able to access reports and the “Save”, “Export”, “Schedule”, and “Save to favorites” features within reports. 

Operator roles

The first layer of access control within CoreView is operator roles. This determines what an operator can and cannot do or view within the platform.

In the Essentials solution, all operators have a Tenant Admin role. 

Operators with a Tenant Admin role can freely give and remove lower roles assigned to them.

It is recommended that your organization limit the number of operators with the Tenant Admin role.

 

Tenant Admin

The Tenant Admin role is designed for individuals who will administrate your CoreView tenant. 

  • It is analogous to the Global Admin role in MS365. 
  • They have unrestricted access to CoreView.
  • They have access to all the CoreView settings.
  • Operators in this role can manage everything: groups, permissions, license pools, and other operators.
  • They can create custom actions, manage operators, v-tenants and permissions.
  • They are able to see all reports, all workflows, and all Playbook policies.
  • They have access to all global tenant settings, license pools available, and all the tenant data. 

Please note that Tenant admins need a Management role to view all management actions.

 
 
 

Management

The Management role allows operators to:

  • View and perform management actions.
  • Run management actions through reports, the wizard, and the User Card.
  • Have access to view and run workflows.
 
 

Global Stats

The Global Stats role allows operators to:

  • Access and view aggregated reports, regardless of the V-Tenant filter.
  • See data used in reports that cannot be filtered.

Note: operators don't need a Global Stats role in order to view:

  • Microsoft 365 deleted groups 
  • Sharepoint recycle bin
 
 
 

Global License

The Global License role allows operators to:

  • Manage all license pools.
  • Assign licenses, even if they are outside of their assigned license pool.
  • Have access and view all license pool reports.
 
 

Audit

The Audit role allows operators to:

  • Access and view audit reports, such as audit activities.
  • Manage alerts in the portal.

Operators with the appropriate permissions and management role can access “Message trace”, “Quarantined messages”, and “Calendar permissions” directly, bypassing the dependency on the audit role.

 
 
 

Playbook roles

Learn more about Playbook roles in the designated Playbook roles article. 

 
 

Support chat

The Support chat role role allows operators to:

  • Access the support chat.
  • Interact with CoreView's support team.
 
 

Workflow editor

This Workflow editor role allows operators to:

  • View, create, edit, and delete a workflow or template.
  • Duplicate, export, activate and deactivate workflows.
  • View, create, and edit notification settings.
  • Delete schedule.
 
 

Workflow publisher

The Workflow publisher role allows operators to:

  • View and delete workflows and templates
  • Activate, deactivate, and publish workflows
  • View, create, and edit notification settings
  • Delete schedule
 
 

CoreVoice 

The CoreVoice role grants user the ability to submit, vote on and review enhancement requests to CoreView.

 
 

Configuration admin

The Configuration admin role grants operators the ability to:

  • Manage all settings within Configuration Manager SaaS
  • Perform any actions available in Configuration Manager SaaS
 
 

Configuration viewer

The Configuration viewer role allows operators to:

  • Access and view all areas of Configuration Manager SaaS

Note: operators with this role cannot make changes or initiate Sync actions in Configuration Manager SaaS.