Custom role
AI summary
Build custom roles by combining any permissions across functional areas, from Dashboard and Policy to Automation and Provisioning. Three criticality levels determine which automations and actions a role can execute.
In addition to the built-in Admin, Contributor, Owner, and Reader roles, Rencore Governance lets you assemble a custom roleCustom roleA custom role is a role you build yourself in Rencore Governance when no built-in role fits.Read more from any combination of the permissions below, grouped by area.
Dashboard
| Permission |
|---|
| Read Dashboard |
| Create Dashboard |
| Edit Dashboard |
| Delete Dashboard |
| Import Dashboard Schema |
| Export Dashboard Schema |
| Share Dashboard |
| Save as… |
Inventory
| Permission |
|---|
| Read Inventory |
| Enable/Disable inventory |
| Create Segment |
| Edit Segment |
| Delete Segment |
| Import Segment Schema |
| Export Segment Schema |
| Edit Page |
Check
| Permission |
|---|
| Read Policy |
| Create Policy |
| Edit Policy Permission |
| Delete Policy Permission |
| Import Policy Schema |
| Export Policy Schema |
Automation
The three Execute actions of criticality permissions decide which automations and built-in actionsBuilt-in actionA built-in action is a ready-made operation you run directly on inventory objects without building an automation, for example adding a user to a Team.Read more a role may run, by their criticality levelCriticality levelA criticality level, Low, Medium or High, rates how much impact an automation or built-in action has on your tenant.Read more.
Environment
| Permission |
|---|
| Open settings |
DataManagement
| Permission |
|---|
| Export data |
Report
| Permission |
|---|
| Read Report |
| Create Report |
| Edit Report |
| Delete Report |
| Import Report Schema |
| Export Report Schema |
| Share Report |
VirtualTenants
These permissions apply to Virtual EnvironmentsVirtual EnvironmentA Virtual Environment is a logical segment of the data in one Microsoft 365 tenant, for example a department, region or subsidiary.Read more.
| Permission |
|---|
| Read Virtual Environment |
| Create Virtual Environment |
| Edit Virtual Environment |
| Delete Virtual Environment |
| Manage Virtual Environment |
AccessReview
| Permission |
|---|
| Read Access Report |
| Create Access Review |
| Edit Access Review |
| Delete Access Review |
| Import Access Review Schema |
| Export Access Review Schema |
| Approve Access Review |
Provisioning
| Permission |
|---|
| Read Provisioning |
| Enable\Disable Provisioning |
| Create Provisioning |
| Edit Provisioning |
| Delete Provisioning |
| Import Provisioning Schema |
| Export Provisioning Schema |
Home
| Permission |
|---|
| Read Home |
Frequently asked questions
Can I create custom roles beyond the built-in roles?
Yes. Rencore Governance lets you assemble a custom role from any combination of permissions.
What permissions are available for custom roles?
Permissions cover Dashboards, Inventory, Policies, Automations, Environments, Reports, Virtual Environments, Access Reviews, Provisioning, and Home, with actions like Read, Create, Edit, Delete, Import, and Export available for most areas.
How do automation criticality levels work in custom roles?
The three Execute actions of criticality permissions (high, medium, and low) control which automations and built-in actions a role may run based on their criticality level.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?