立即与支持人员聊天
与支持团队交流

On Demand Global Settings Current - User Guide

Working with On Demand Global Settings Overview of On Demand Global Settings Signing up for On Demand Global Settings Managing organizations and regions Adding users and groups to an organization Managing your Microsoft Entra tenants and on-premises domains On Demand Home page Configuring settings Documentation roadmap Technical Support

Users, groups, and roles

When you add a user or group to an organization, you also assign one or more roles. The role assignment determines what permission level they have and what tasks they can perform.

On Demand is configured with a number of default roles. The default role permission settings cannot be changed, but you can create custom roles with specific permission settings to align with your company policies. You can assign multiple roles to each user or group to combine permission sets.

 
* 
NOTE: Every user and group must be assigned to at least one role. You cannot remove all roles from a user or group.

Access Control provides the following options:

•
For information about configuring roles, see Access Control: Roles
•
For information about managing user access, see Organization access for Microsoft Entra users
•
For information about managing group access, see Organization access through Microsoft Entra group membership

Default roles and permissions

On Demand is configured with default roles that cannot be edited or deleted. You can, however, duplicate default roles to create custom roles.

For the complete list of module default roles and permissions, refer to your module-specific User Guide.

Default Roles
•
On Demand administrator
On Demand administrators have full access to global settings and all modules. The user who signed up for On Demand and created the organization is automatically assigned the On Demand Administrator role.
•
Module administrator
Module administrators only have access to the specific module where they have been added as an administrator. Module administrators do not have access to global settings or tenants.
On Demand Organization Role Permissions
Permission
Description

Can Add and Remove Tenants

Users with this permission can add new tenants or remove existing tenants from the organization.

Can Configure Agents

Users with this permission can add or modify the actions and domains of an agent in the organization.

Can Create and Delete, and Assign Access Control Roles

Users with the permission can create, assign user to, and delete access control roles for the organization.

Can Export Data

Users with this permission can export data from the selected services within the organization.

Can Read Access Control Roles

Users with this permission are able to view specific permissions within an access control role in the organization.

Can Read Activity Trail

Users with this permission can access the activity trail and view detailed information regarding user and system activity that has occurred within the organization associated to the selected services.

Can Manage the Organization

Users with this permissions can delete or edit the organization (modify name and authorized domains list).

To view the current list of permissions available for each default role:
1
Select Settings, expand Access Control, and select Roles.
2
Click a row in the list of default roles to expand the table to see the individual role permissions.

Access Control: Roles

Each access control role has a specific set of permissions that determines what tasks a user assigned to the role can perform. Your On Demand organization comes configured with a number of default roles. The default role permissions settings cannot be changed, but you can create custom roles with specific permission settings to align with your company policies.

 
* 
NOTE: To manage access control roles, you must have the permission "Can create, delete, and assign access control roles".

Perform the following tasks from the Setting | Access Control | Roles page:

•
Viewing role permissions
•
Creating a custom role
•
Editing a custom role
•
Assigning a role to a user
•
Deleting a custom role

Viewing role permissions

Use the Roles page to view the list of roles defined for your organization. You can also view the users assigned to each role.

To view roles and permissions
1
In the left side navigation panel, click Settings, expand Access control and select Roles.
2
Click on a role name to open a read only page that displays the Role Permissions.
The panel on the right is a list of users assigned to the role.
3
To add users to the role, see Adding a user to your organization and assigning a role.
4
To add groups to the role. see Adding a group to your organization and assigning a role.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级