Roles and privileges in IPAM
When you add a user account in IPAM, you assign the user a role. The role determines the user's privileges.
If subnets are moved to create hierarchy changes, inherited roles are inherited from the new parent. Customized roles are not changed.
Role | Privileges |
---|---|
Administrator |
The Administrator user role has read and write access, can initiate scans to all subnets, manage credentials, custom fields, and IPAM settings and has full access to DHCP management and DNS monitoring. Only administrators can perform certain actions, such as:
|
Power User |
Power Users have the same privileges granted to Operators, with the addition of the following:
|
Operator |
Operators have the same privileges granted to Read Only users with the addition of the following:
|
Read Only |
This role has read-only access to DHCP servers, scopes, leases, reservations and DNS servers, and zones. This role restricts all access, including access to all DHCP management and DNS monitoring, to the following:
|
Custom |
A Custom Role is customized on a per subnet basis and specifies which privileges a user has. You can also overwrite the inherited permissions on child objects. The child objects inherit the same permissions as the parent. |