CA Strong Authentication Administration Guide › Overview of the Administration Console › Supported Roles › Custom Roles

Custom Roles

As an MA, you can also create new administrative roles that inherit a subset of permissions from one of the following predefined parent roles:

• Global Administrator
• Organization Administrator
• User Administrator

These roles are called custom roles, and are derived by disabling some of the default permissions that are associated with the parent role. For example, if you want to disable the Organization Creation Permission for a GA, then create a custom role by disabling this permission.

If you create a custom role, then it becomes available as a role option when you create or update an administrative role. In addition to creating custom roles, you can also update and delete them.