User roles and access control
- Last Updated: May 6, 2026
- 1 minute read
- Automate MFT
- Documentation
Automate MFT supports several distinct user roles, each with specific permissions and responsibilities. These roles are assigned globally across the application. New users are added via invitation. Administrators can invite users and assign or edit a user's role.
Owner (Special Administrator)
The Owner is a unique administrative user created during product setup.
- All Administrator privileges.
- Cannot be removed from the system.
The Owner ensures there is always at least one user with full administrative access.
Administrator
Administrators have full access to all features and settings in Automate MFT.
- Add, edit, and delete users.
- Assign user roles and permissions.
- Configure system-wide settings.
- Create, edit, and delete tasks.
- Schedule and run tasks.
- Manage library components including endpoints, agents, schedules, and authentication methods.
- Access audit logs and system reports.
- Invite new members to the system
An Administrator cannot remove or edit an Owner.
Editor
Editors can manage and configure tasks and endpoints, but have limited access to user management.
- Create, edit, and delete tasks.
- Schedule and run tasks.
- Manage library components including endpoints, agents, schedules, and authentication methods.
- View and generate reports.
- Cannot add or remove users, or change user roles.
Editors maintain workflows but do not administer user accounts.
Viewer
Viewers have read-only access to Automate MFT.
- View tasks, endpoints, agents, schedules, and reports.
- Cannot create, edit, or delete any configuration or data.
- Cannot manage users or system settings.
Viewers are users who only need to monitor system activity.
User role permissions
|
Permission |
Owner |
Administrator |
Editor |
Viewer |
|---|---|---|---|---|
|
Manage users |
✓ |
✓ |
✗ |
✗ |
|
Assign roles |
✓ |
✓ |
✗ |
✗ |
|
Create/edit tasks |
✓ |
✓ |
✓ |
✗ |
|
Schedule or run tasks |
✓ |
✓ |
✓ |
✗ |
|
Manage library components |
✓ |
✓ |
✓ |
✗ |
|
View reports |
✓ |
✓ |
✓ |
✓ |
|
Access audit logs |
✓ |
✓ |
✓ |
✓ |
|
Manage parameters |
✓ |
✓ |
✓ |
✗ |
|
View parameters |
✓ |
✓ |
✓ |
✓ |
|
Cannot be removed |
✓ |
✗ |
✗ |
✗ |