Manage roles

Roles control which components and pages are visible and accessible to you.

For example, this section is marked "For tenant administrators." Only users assigned the Tenant Administrator or Tenant Co-Administrator role can perform the functions in this section, or even see the menu option that leads to this page.

You manage roles through the Roles page.

The Built-in roles section of this guide lists, in alphabetical order, the preconfigured roles that you can assign to users and explains how they grant access to areas of your tenancy and hosted services. Do not modify built-in roles unless you have discussed the need with the Progress Data Cloud Operations Team.

Set default user roles

You can use Set Default User Roles to configure default roles to apply to newly registered users. These roles grant users immediate access to the Progress Data Cloud interface as soon as they register. Default roles do not apply to service accounts.

You cannot include Tenant Co-Administrator as a default role. Progress Data Cloud also does not recommend including service administrator roles, such as MarkLogic Security Administrator or Studio Super Administrator, as default roles. You can add these roles after the users who need them register.

Add custom role

Use Add custom role to add a new role to Progress Data Cloud. Custom roles are typically required when you configure applications for your MarkLogic Server Service instance. Such a role is typically related to a service endpoint that you will eventually expose or support in that instance of MarkLogic Server Service.

Any custom role that you create appears on the Role Group with after it.

Manage in MarkLogic Server Service

After you create a Progress Data Cloud role for a MarkLogic Server Service instance, and if you also have the MarkLogic Administrator role, you can manage the new role directly in the MarkLogic Server Service Admin UI by clicking for that role. In the sidebar that appears, you can create, edit, and delete the MarkLogic Server Service role that you want to associate with the new Progress Data Cloud role.

Assign in Progress Data Cloud or in Microsoft Entra ID

From the Add custom role or Edit Role sidebar, you can choose to either assign a role through Progress Data Cloud (default) or Entra ID. If you use Entra ID, then you can preconfigure role assignments so that Progress Data Cloud automatically applies a role based on your Entra ID app role assignments during sign-in. See Microsoft Entra ID app roles for details.

Any role assigned through Entra ID appears on the Role Group with after it.