# Predefined Roles

## User Guide: Admin Tab <a href="#user-guide-admin-tab" id="user-guide-admin-tab"></a>

### Predefined Roles <a href="#predefined-roles" id="predefined-roles"></a>

BlueFletch provides organization-level predefined roles which can be assigned to any organization user. It also provides one role with system-level permissions, which can be assigned to a BlueFletch team member (must have a user account with an email domain of **@bluefletch.com**) to support the organization if desired. Each of these roles is added automatically when the organization is created, and none can be edited.

These roles can be assigned to a user on the BlueFletch Portal ***Roles*** page while [creating or editing a role](/bluefletch-enterprise/product-guides/portal/admin/roles/manage-roles.md), or from the ***Users*** page.

| Role Name                 | Permissions                                                                                                                                                                                                                                                       | Description                                                                                                                                                                                             |
| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Admin**                 | All organization-level permissions.                                                                                                                                                                                                                               | Organization Administrator role. "Admin" role has access to view and manage all the organization's features.                                                                                            |
| **BlueFletch Role**       | Admin Organization Manage, Admin Roles Manage, Admin User Manage, Audit Log View, Launcher Notification Test, Support Dashboard Explorer, Support Dashboard Manage, System Dashboard Manage, System Download Beta View, System Download Manage, System EMM Manage | A role that allows BlueFletch personnel to support the organization.                                                                                                                                    |
| **EMM Admin**             | EMM Device Manage, EMM Enterprise Manage, EMM Policy Manage, EMM Policy Token Manage, Admin Download View, Admin Files Manage, Support Dashboard View                                                                                                             | A role to allow for managing EMM Console settings.                                                                                                                                                      |
| **EMM User**              | EMM Device View, EMM Enterprise View, EMM Policy Token View, EMM Policy View, Support Dashboard View                                                                                                                                                              | A role to allow viewing EMM Console settings.                                                                                                                                                           |
| **IP Address Management** | IP Addres Allow List Manage                                                                                                                                                                                                                                       | A role that allows for management of the Device Allowed IP Addresses.                                                                                                                                   |
| **Key Management**        | API Key Management                                                                                                                                                                                                                                                | A role that allows for management of the Device and API keys. *This role requires additional role(s) in order to access Portal. The permission* ***Admin Organization View*** *is required at minimum.* |
| **Launcher Admin**        | Admin Sites Manage, Launcher Config Manage                                                                                                                                                                                                                        | A role that allows for managing Launcher and Site Configurations.                                                                                                                                       |
| **Launcher User**         | Admin Sites View, Launcher Config View                                                                                                                                                                                                                            | A role that allows for viewing Launcher and Site Configurations.                                                                                                                                        |
| **Playbook Admin**        | MDM Device Manage, MDM Playbook Manage, MDM Play Manage, MDM Deployment Group Manage, Admin Playbook Agents View, Admin Download View, Admin Files Manage, Support Dashboard View                                                                                 | A role to allow for managing Playbook settings.                                                                                                                                                         |
| **Playbook User**         | MDM Device View, MDM Playbook View, MDM Play View, MDM Deployment Group View, Support Dashboard View                                                                                                                                                              | A role to allow viewing Playbook settings.                                                                                                                                                              |
| **Support Analyst**       | Support Dashboard Explorer, Support Dashboard Manage                                                                                                                                                                                                              | A role that allows exploring Support Analytic data.                                                                                                                                                     |
| **User**                  | Support Dashboard View, Support Report View                                                                                                                                                                                                                       | Organization user role for basic access.                                                                                                                                                                |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.bluefletch.com/bluefletch-enterprise/product-guides/portal/admin/roles/predefined-roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.