The following are Syncplicity roles for users:
- Global administrator
- Support administrator
- eDiscovery administrator
- API User
- User
Global administrator
The Syncplicity account owner by default has the Global administrator user role. A Global administrator can assign users to that role or roles of lesser privileges when adding or editing their accounts.
The Global administrator role has access to all Syncplicity administrator functions from the administrator console. For the Enterprise Edition, this includes access to on-premises storage and connector configuration settings.
Although users with the Global administrator role can assign and change roles of other users, the role of the Syncplicity account owner cannot be changed. Instead, the Global administrator must first change the account owner to another existing Global Administrator, described in Account owner, and then change the former account owner's role.
Support administrator
The Support administrator role has limited access. Users with this role perform user provisioning and user account management. The Support administrator role can perform the following from the administrator console:
- Access storage reports and last login by user report.
- Manage user accounts on a limited basis.
- Perform device and folder management the same as Global administrator.
The Support administrator role cannot:
- Add seats or storage.
- Create user accounts with an administrator role, change the role of a user, impersonate a user or delete an account.
If configured, Support administrators are subject to the following restrictions:
- Administrator password complexity.
- IP address range-based access to the administrator console.
- Access to users only in those groups specified by the Global Administrator.
eDiscovery administrator
The eDiscovery Administrator role has read-only access to reports, user accounts, devices and folders. For more information on eDiscovery Administrator and eDiscovery features, see About eDiscovery and Syncplicity.
If configured, eDiscovery administrators are subject to the following restrictions:
- Administrator password complexity.
- IP address range-based access to the administrator console.
- Access to users only in those groups specified by the Global Administrator.
API user
Global administrators create service users with API User role and use these users to create applications in the Sycplicity Developer Portal.
NOTE: Because the API user role is designated for service accounts, API users cannot log in to the my.syncplicity.* site, or the Sycplicity Developer Portal.
When a Global administrator creates a user account with the API User role, an application token is generated. This token is required when the Global administrator uses the API user to create new applications in the developer portal. The application token, along with the client id and client secret, is used by the application to authenticate to Syncplicity. Applications authenticate and act on behalf of the API User account that was used to create them.
By default, accounts with the API User role can access only their own content through API and manage users as follows:
- users with API role are not allowed to create or edit users with Global Admin role
- users with API role are not allowed to create or edit users with Account Owner role
- users with ANY role are not allowed to create or edit users with Support Tools role
- users with API role are allowed to create or edit users with Report Viewer role
- users with API role are allowed to create or edit users with Support Admin role
- users with API role are allowed to create or edit users with eDiscovery Admin role
- users with API role are allowed to create or edit users with API User role
A Global administrator can modify some of these privileges from the MySite portal Admin → User Accounts.
User
The User role does not have access to any administrator functions.
Users can share, upload and download files per their privileges and user group settings managed by global administrators and support administrators.