Objectives
This article is intended for Torii Admin who wishes to create a controlled permission view to an IT Admin persona.
You will learn how Torii defines the IT Admin role and how to assign it to a specific user.
At the end of this article, you will find a short video presenting the information available for the IT Admin once assigned.
* Prerequisite - Read the Introduction to Role-Based Access Control (RBAC) article
Overview
The Torii IT admin role is made for IT personnel who are part of the Torii IT management team; however, are not the primary Torii admin.
These Torii users are responsible for the daily operation of Torii management like onboarding and off-boarding users, license utilization, review & approval process, and configuring Integrations and workflows.
The IT Admin has a full picture of the applications usage and users' details but is not exposed to financial data
Note that:
- The IT Admin role will NOT be exposed to:
- Contract details like custom fields and Torii attributes.
Data about any level of cost (contract value) per org or user, department, and applications. - Org expenses data like Invoices, contract files, receipts, etc. for departments, apps, and user
- Contract details like custom fields and Torii attributes.
- The IT Admin role will be exposed to license data, not including the cost per license
View IT Admin Role Scopes
- Torii provides an out-of-the-box predefined IT Admin role. You can view the role scopes but can not edit them.
- Torii users assigned with a procurement role have no access to employee data, application usage, or perform offboarding and workflow actions.
What are the IT role scopes & access levels?
- Setting - Read
- Workflows - Take Action
- Offboarding - Take action
- User attributes - Take action
- Integrations - Take action
- Public views - Read
- Application - Take action
- Contracts - No access
- Expenses - No access
- License cost - No access
How to Assign a Role?
- Go to the Settings page
- Click on Team
- Select the User to which you want to assign the role and select the role from the dropdown list