Assign User Roles

User Roles determine individual access permissions in Pharos Cloud. Each role defines which areas of the Pharos Cloud system a user may access and the actions the user can perform within those areas. When systems users log in to Pharos Cloud, they can see only those areas of the Pharos Cloud environment that they are authorized to see and use.

Pharos Cloud includes the following predefined roles, each with a standard set of permissions:

Role	Capabilities
System Administrator	Users with this role have access to most areas in Pharos Cloud. This role is assigned to individuals who will manage users and perform configuration changes to the Pharos Cloud system. A user with a System Administrator role can perform the following tasks: Account Administration Create, invite, edit and delete users Assign system roles to users Override default device costs Account Settings > Access tab (Create, invite, edit and delete users) Account Setting > Single Sign-on Configuration tab (Configure and edit SSO) Account Setting > Policy tab (Create, edit, and delete policies) Account Setting > Data Privacy tab (can edit Data Privacy) Account Settings > Settings tab Print Scout Create, download and configure Device Scout Create, download, configure and delete Fleet Manager View, edit and export Fleet Manager information Manage device inventory (set devices as in/out of service) Generate reports Print Analytics View and explore print data Set business targets for dashboard key metrics Export Print Analytics monthly CSV file (requires a full month's data) Secure Print Secure printers Generate QR code labels Change or set printer credentials (username/password) View and explore Secure Release data View Print Scout list Configure Secure Release settings Invite users (Guests, Chrome users, Direct Print Users) Configure Universal Print Integration Secure Release Settings Advanced menu All functions under the Secure > Advanced tab (Cloud Connector logs, User Registration) Access to the Secure Printers > Reset button Access to the Secure > Theme tab. Note: Requires a Secure Release license. Edit Secure Scan Settings (Secure > Settings screen) Edit User Portal Settings Direct Print Import printers for Direct Print Invite Direct Print Users View Print Scout list Configure Direct Print Settings Configure User and Group synchronization (SCIM 2.0) Delete, view, and update locations, printers, and queues Analysis Export Fleet Manager meter data Note: This role should be assigned to a small set of users
IT Administrator	Users with this role can manage users and their assigned roles, deploy scouts, and manage print data views for both Fleet Manager and Print Analytics. A user with an IT Administrator role can perform the following tasks: Account Administration Create, invite, edit and delete users Assign system roles to users Override default device costs Account Setting > Access tab (Create, invite, edit and delete users) Account Setting > Single Sign-on Configuration tab (Configure and edit SSO) Account Setting > Policy tab (Create, edit, and delete policies) Account Setting > Data Privacy tab (can edit Data Privacy) Account Settings > Settings tab Print Scout Create, download and configure Device Scout Create, download and configure Fleet Manager View, edit and export Fleet Manager information Manage device inventory (set devices as in/out of service) Generate reports Print Analytics View and explore print data Set business targets for dashboard key metrics Export Print Analytics monthly CSV file(requires a full month's data) Secure Print Secure printers Generate QR code labels Change or set printer credentials (username/password) View and explore Secure Release data View Print Scout list Configure Secure Release settings Invite users (Guests, Chrome users, Direct Print users) Configure Universal print Integration Secure Release Settings Advanced menu All functions under the Secure > Advanced tab (Cloud Connector logs, User Registration) Access to Secure Printers > Reset button Access to the Secure > Theme tab. Note: Requires a Secure Release license. Edit Secure Scan Settings (Secure > Settings screen) Edit User Portal Settings Direct Print Import printers for Direct Print Invite Direct Print Users View Print Scout list Configure Direct Print Settings Configure User and Group synchronization (SCIM 2.0) Delete, view, and update locations, printers, and queues Analysis Export Fleet Manager meter data
Business Manager	Users with this role can view all print data in both Fleet Manager and Print Analytics, and have a limited ability to manage the system. It is intended for users responsible for planning the business implications of the print environment. A user with a Business Manager role can perform the following tasks: Account Administration Override default device costs View available roles Account Setting > Single Sign-on Configuration (can edit SSO configuration) Account Setting > Policy tab (Create, edit, and delete policies) Account Setting > Data Privacy tab (can edit Data Privacy) Print Scout View installed scouts Device Scout View installed scouts Fleet Manager View, edit and export Fleet Manager information Generate reports Print Analytics View and explore print data Set business targets for dashboard key metrics Import and manage print users Export Print Analytics CSV file (requires full month's data) Secure Print View and explore Secure Release data View Secure Printers list View Print Scout list View Secure Release Settings Invite users (Guests, Chromebook Users, Pharos Secure Release Users) View Secure Scan Settings (Secure > Settings screen) View User Portal Settings Direct Print Import printers for Direct Print Invite Direct Print Users View Print Scout list
Print Analyst	The Print Analyst role allows users to view all print data without seeing any names associated with the transactions in Print Analytics and removes any ability to view or manage the system. A user with a Print Analyst role can: Account Administration Account Setting > Single Sign-on Configuration tab (view SSO config) Account Setting > Policy tab (view Policy Print) Account Setting > Data Privacy tab (view/read only Data Privacy) Print Scout Not applicable Device Scout Not applicable Fleet Manager View Fleet Manager information Generate reports Print Analytics View and explore print data (no print user information is shown) Secure Print View and explore print data View Secure Printers list View Secure Release settings Invite Users (Guests, Chromebook users, Direct Print users) View Secure Scan Settings (Secure > Settings screen) View User Portal Settings Data Privacy Can view Data Privacy regions
Fleet Monitor	The Fleet Monitor role allows users to view device print data and is blocked from viewing Print Analytics or any level of system management. It is intended for a user responsible for maintaining and understanding the print environment at a tactical level. A user with a Fleet Monitor role can: Account Administration Account Setting > Single Sign-on Configuration tab (view SSO config) Account Setting > Policy tab (view Policy Print) Print Scout Not applicable Device Scout Not applicable Fleet Manager View Fleet Manager information Generate reports Print Analytics Not applicable Secure Print Not applicable

Updating System User Roles

When a system user account is created, a role is assigned by default. System Administrators can update a user’s role at any time without sending a new invitation. The change takes effect automatically the next time the user logs in.

To modify the role of an existing system user, you must be signed in with System Administrator privileges.

To change a role of an existing user:

Go to Account Setting > System Users.
Select the user account whose role you wish to change.
Click the Edit button.
In the Edit dialog box, in the Role Name field, select the role you want to assign to the selected user.
Click Save.