CA Strong Authentication Administration Guide › Working with Custom Roles › Understanding Custom Roles

Understanding Custom Roles

As an MA, you can create new administrative roles that inherit a subset of permissions from one of the following predefined parent roles (as discussed in "Overview of the Administration Console"):

• Global Administrator
• Organization Administrator
• User Administrator

These roles are called custom roles, and are derived by disabling some of the default permissions associated with the parent role. For example, if you want to disable the permission to create organizations for a GA, you can create a custom role by disabling this permission, and assigning the same to the GA.

When you create a custom role, it becomes available as a role option when you create or update an administrator. In addition to creating custom roles, you can also update and delete them. See the following sections in this chapter for more information about management of custom roles.