User roles and permissions

In a project, the agency or tenant can assign the following roles in the CFT admin portal.

• Tenant Manager
• Tenant Administrator
• Tenant Ops
• Tenant User
• Tenant Viewer

Note: A user can only be assigned to one role per project.

Tenant Manager

The Tenant Manager acts as the project owner.

• When a project is created in the admin portal through a TechBiz subscription, the Subscription Admin is automatically assigned as the initial Tenant Manager.
• The initial Tenant Manager can then assign additional public officers or vendors (with TechPass accounts) as Tenant Managers or other roles.
• Tenant Managers can add or remove users and assign them to any project role.

Tenant Administrator

The Tenant Administrator has an approver-focused role with limited permissions.

• This role is typically assigned to an agency or tenant project team member (Public Officers or vendors).
• Tenant Administrators can add or remove users in the Tenant User and Tenant Viewer roles.

Tenant Ops

The Tenant Ops role is an operations-focused role with limited permissions.

• This role is typically assigned to an agency or tenant project team member (Public Officers or vendors).
• Tenant Ops users can edit job variables and schedules, activate or deactivate jobs, and trigger manual job runs. Uploading or modifying the job script requires a service request.

Tenant User

The Tenant User is an agency or tenant project team member. Public officers or vendors can be assigned as Tenant Users.

* These actions require additional approval from a Tenant Manager or Tenant Administrator

Tenant Viewer

The Tenant Viewer can be an agency business partner or vendor.

Role assignment recommendations

When assigning roles, please take note of the following:

CFT recommends granting Tenant Manager, Tenant Administrator, and Tenant User access only to essential members within the Primary Organization staff or contractors. Configurations can be done on behalf of your stakeholders, without the need to grant them access to your project space.

Important: Granting access to third-party users might compromise your workflows, webhooks, and applications. CFT will not be responsible for such arrangements involving third-party users.

CFT recommends that only staff or trusted direct contractors of the Primary Subscriber be given access to the CFT Portal to manage and distribute relevant encryption keys to your stakeholders.

Important: Granting access to third-party users may compromise the generated keys, and CFT will not be responsible for such arrangements involving third-party users.