Updated: Wednesday, November 20, 2024

Permissions dictionary & menus

The permissions dictionary & menus is an overview of the permissions and what components of N-able N-central are enabled and available to the user. The Manage configuration enables the user to perform a task and a Read-Only configuration only allows the user to see the information or feature and not perform any action or task. The Menu column outlines the menus that become available when each permission in a role is enabled as either Manage or Read-Only.

API users require the same permissions as UI users would to be able to complete the same tasks. The API user would adhere to the same rules as any other user.

Which area do you want to view?

Administration
Configuration
Devices
Reporting
Tickets and Notifications

Administration

MSP N-central
Feature	Permission	Menu
Access LiveChat	Enables and displays the LiveChat icon to connect with a N-able Support representative.	No menus; enables LiveChat icon in upper-right corner of the user interface.
Access NetPath	View, create and delete NetPath paths for devices. View NetPath paths list and path information, export path lists. (Read-only)	Views > NetPath (Manage & Read-only)
Access Topology Maps	View, scan, delete, add a new job. View the maps. (Read-only)	Views>Topology Maps
Administration Tools	Disk Diagnostics SMTP Authentication Test Email Delivery Network Setup Also includes outbound communication and the Welcome page when first logging in.	None
Certificates	Generate, upload and download certificates. Manage APNS certificate.	None
System Backup and Restore	Configure, download and restore system backups.	None
System Defaults	Modify system defaults.	Administration > Defaults > Agent & Probe Settings Administration > Defaults > Backup and SNMP Defaults Administration > Defaults > Customized System Email Administration > Defaults > Data Retention Administration > Defaults > Device Defaults Administration > Defaults > Message Templates Administration > Defaults > Remote Control Defaults Administration > Defaults > Remote Control Log Level Administration > Defaults > Service Templates Administration > Defaults > Session Timeout Administration > Defaults > Update Repository Administration > Defaults > User Defaults Administration > Defaults > Warranty Monitoring
Integration Management	Enables the Integrations menu to manage and install integrated components into N-able N-central such as N-able Backup and EDR.	Administration > Integrations > Integration Management
Microsoft Intune	Create and edit profiles of any kind. Activate/Deactivate Intune based on assigned Access Group.	Integrations>Microsoft Intune
N-able EDR	Enables the user to install EDR on devices and monitor status and view reports. View EDR status and reports for a device. (Read-only)	None

Custom Properties
Feature	Permission	Menu
Create/Edit/Delete	View custom properties, select from drop-down choice list properties and edit text, date and URL properties for a device or organization level. View custom properties assigned to a device or organization level. (Read-only)	Administration > Custom Properties
View/Set	Set the custom properties on devices and customers.	No menus affected.
Custom properties appear in filters regardless of Custom Property permissions.

Reference
Feature	Permission	Menu
My Links	Add and delete links. View and click available links. (Read-only)	MyLinks and all available links. If Read-Only is selected, Manage My Links is not available
RSS	Access and read RSS messages. (Read-only)	Help > RSS Updates
Support Tools	Available at the System level. Includes Agent Logs, Log Level, View Logs, Session Timeout and Server Code Drops menus.	Administration Utilities > Active Sessions Administration Utilities > Agent/Probe Configuration Administration Utilities > Agent Logs Administration Utilities > Log Levels Administration Utilities > Server Code Drops Administration Utilities > Session Timeout Administration Utilities > View Logs
System Upgrade Fail Message	Displays the message when logging in on the Welcome page when the upgrade fails.	None
What's New Training Videos and Help Resources	Access and read videos and online help. (Read-only)	Help > What's New Help > Training Videos Help > Version Information Help > Help

SO/Customers/Site

Feature

Permission

Menu

Branding

Ability to brand a Service Organization, Customer or Site.

Administration > Branding

Create SO/Customer/Site

Ability to create a new SO, customer or site.

Actions > Add Customer

Administration > Customers

User Management
Feature	Permission	Menu
Access Groups	Add, edit and delete Access Groups. View Access Groups and their details. (Manage & Read-only)	Administration > User Management > Access Groups (Manage & Read-only)
Roles	Add edit and delete Roles. View Roles and their details. (Manage & Read-only)	Administration > User Management > Roles (Manage & Read-only)
Users	Add users. Configure LDAP Servers. Configure two-factor authentication. Configure password system settings and complexity rules. View Users and their details. (Read-only)	Administration > User Management > LDAP Servers Administration > User Management > Two-Factor Authentication Administration > User Management > Users

Configuration

Asset Discovery

Feature

Permission

Menu

Discovery Jobs

Add and edit discovery jobs.

Import assets.

Import discovered devices.

Ignore discovered devices.

Delete discovered devices.

Set device class.

Set the license mode.

Retrieve registration tokens. For a user to be able to retrieve registration tokens, Discovery Jobs will need to be set to Manage.

View discovered assets. (Read-only)

View available discovery jobs. (Read-only)

Views > Job Status (Manage & Read-only)

Actions > Add/Import Devices

Actions > Download Agent/Probe

Actions > Run a Discovery

Configuration > Asset Discovery > Discovery Jobs (Manage & Read-only)

Configuration > Monitoring > Monitoring Setup Wizard

Administration > Defaults > Discovery Defaults

Administration > Probes (Manage & Read-only)

Backup

Feature

Permission

Menu

Profiles

Add and edit profiles for the Arcserve Backup Manager.

View profiles and their settings for Arcserve backup. (Read-only)

Configuration > Backup Manager > Arcserve > Backup Share

Configuration > Backup Manager > Arcserve > Profiles (Manage & Read-only)

Compliance
Feature	Permission	Menu
Application	Add/edit application compliance rules. Enable the status and delete rules. Export application compliance rules. Set the compliance settings. View application compliance rules and settings. (Read-only) View application compliance associations. (Read-only)	Configuration > Monitoring > Application Compliance Rules (Manage & Read-only) Configuration > Monitoring > Application Compliance Settings (Manage & Read-only)
License		N/A
Syslog Audit Export	Enable Syslog Export Export syslog audit log	Administration > Audit Export

Domain User Management

Feature

Permission

Menu

Domain User Management

Enable/disable/unlock domain users.

Action > Domain User Management

Configuration > Domain User Management

Monitoring
Feature	Permission	Menu
Alerts Acknowledge	Acknowledge alerts.	N/A
Custom Services	Create custom services.	Administration > Service Management > Custom Services
Filters	Add and edit custom filters, view default filters in the Configuration menu and within a device view. View available custom and default filters in the Configuration menu. (Read-only)	Configuration > Filters (Manage & Read-only)
Rules	Add, edit and view rules. Note that License Compliance, Service Templates, Patch Configuration, All Devices View, LAN/WAN Devices and Notification Templates must also be enabled. View available rules. No other permissions need to be enabled.(Read-only)	Configuration > Monitoring > Monitoring Setup Wizard Configuration > Monitoring > Rules (Manage & Read-only)
Service Control	Enable and disable services.	Administration > Service Management > Service Control
Service Templates	Add, edit, import service templates, use the Monitoring Setup Wizard to add a template, view the job status. View service templates and job status. (Read-only)	Views > Job Status (Manage & Read-only) Configuration > Monitoring > Monitoring Setup Wizard Configuration > Monitoring > Service Templates (Manage & Read-only) Administration > Service Management > Service Templates (Manage & Read-only)
Services/Tasks	View job status. (Manage & Read-only)

N-able Backup
Feature	Permission	Menu
Cove Backup	View the Cove Data Protection menu in the navigation.	Left hand navigation menu for Cove Data Protection
Dashboard	View dashboard and configure device properties for the dashboard.	Cove Data Protection > N-able Backup> Dashboard
Device Passphrase	N/A	None
Profiles	Add, edit delete MSP Backup profiles. Note that LAN Device Settings View, Device Rules View, Patch configuration, Scheduled Tasks, Security Manager and Notifications permissions need to be enabled.	Cove Data Protection > N-able Backup> Profiles

Patch

Feature

Permission

Menu

Patch Approval

Add, delete, enable/disable automatic approvals, patching by device and by patch. View the Patch Management home page.

LAN Device settings, N-able N-central Reports, SaaS Device settings need to be enabled.

The following permissions are required to be set to Manage:

Network Device > Edit Device Settings
MSP N-central Reports > Reports
SaaS Devices > Edit Device Settings

Actions > Patch Approvals > Automatic Approvals

Actions > Patch Approvals > By Device

Actions > Patch Approvals > By Patch

Configuration > Patch Management

Patch Configuration

Add patch profiles and rules.

Configuration > Patch Management

Scheduled Tasks
Feature	Permission	Menu
Automation Manager	Launch and use AM to create policies.	Actions > Start Automation Manager
File Repository	Access, add and delete files from the Script/Software Repository. View files and their details in the Script/Software repository. (Read-only)	Configuration > Scheduled Tasks > Scripts/Software Repository (Manage & Read-only)
Scheduled Tasks	View job status. View and run actions. Add/Delete scheduled tasks, network shares and scheduled task profiles.	Views > Job Status Actions > Export Last Recovery Point Actions > File Transfer Actions > Push Third Party Software Actions > Run a Backup Actions > Run a Mac Script Actions > Run an Automation Policy Actions > Run a script Actions > Security Manager Scan > AV Defender Custom Scan Actions > Security Manager Scan > AV Defender Full Scan Actions > Security Manager Scan > AV Defender Quick Scan Configuration > Scheduled Tasks > Add/Delete Configuration > Scheduled Tasks > Network Share Configuration > Scheduled Tasks > Profiles

Security/AV
Feature	Permission	Menu
Disk Encryption Manager (Recovery Key Management)	Access to the Retrieve Recovery Code button in the device's Settings > Security Manager menu.	N/A
Profiles	Add, edit and delete AV Profiles for workstations and servers. View the available AV Profiles. (Read-only)	Configuration > Security Manager > Profiles (Manage & Read-only)
Quarantine Management	View, delete and restore quarantined files.	Configuration > Security Manager > Quarantine Management (Manage & Read-only)
Recovery Key Report Report	Access to the Recovery Key report.	N/A
Security Events	View security events. (Manage & Read-only)	Configuration > Security Manager > Security Events (Manage & Read-only)
Security Exclusions	Add, edit and delete global exclusions for processes, files/folders and network scans. View available global exclusions. (Read-only)	Configuration > Security Manager > Global Exclusions (Manage & Read-only)
Update Servers	View, enable/disable and configure update servers. View a list of available update servers. (Read-only)	Configuration > Security Manager > Update Servers (Manage & Read-only)

Devices

Device Management for Apple
Feature	Permission	Menu
Apple Business Manager	View and manage Apple Business Manager tokens.	Configuration > Device Management for Apple > Apple Business Manager (Manage & Read only)
Apps & Books	View, manage, and distribute App Store purchases.	Configuration > Device Management for Apple > Apps & Books (Manage & Read only)
Certificates	View, add, and manage available certificates. View the list of added certificates. (Read-only)	Configuration > Device Management for Apple > Push Certificates (Manage & Read-only)
Command Execution	Send the command to workstations.	All Devices > DMA > Commands > Lock Device All Devices > DMA > Commands > Restart Device All Devices > DMA > Commands > Remote Wipe All Devices > DMA > Commands > Update Device Information All Devices > DMA > Commands > Shutdown Device All Devices > DMA > Commands > Command History
Profile Deployment	View and manage devices and deploy profiles. View devices and profiles. (Read-only)	Device > Settings > Device Management for Apple > Enable User Prompt for Device Enrollment All Devices > DMA > Enrollment Helper > Enable All Devices > DMA > Enrollment Helper > Disable Configuration > Device Management for Apple >Profile Deployment (Manage & Read-only)
Profile Library	View, upload, and manage configuration profiles. View the list of added configuration profiles. (Read-only)	Configuration > Device Management for Apple > Profile Library (Manage & Read-only)

Audit Trail
Feature	Permission	Menu
Audit Trail	View the available audit trails. (Read-only)	None

Devices View
Feature	Permission	Menu
Active Issues	View active issues for devices. (Read-only)	Views > Active Issues (Read-only)
All Devices	View the list of available devices. (Read-only)	Views > All Devices (Read-only)
Dashboards	View available dashboards and add new dashboards. View available dashboards. (Read-only)	Views > Device - Network Devices (Manage & Read-only) Views > Device - Printers (Manage & Read-only) Views > Device - Servers (Manage & Read-only) Views > Manage Dashboards Other available Dashboards (Manage & Read-only)

Direct Support
Feature	Permission	Menu
Applications	Access Direct support for Applications when Direct Support is enabled on a device.	None
Command Prompt	Access Direct support for Command Prompt when Direct Support is enabled on a device.	None
File System	Access Direct support for the File System when Direct Support is enabled on a device.	None
Power Management	Access Direct support for Power Management when Direct Support is enabled on a device.	None
Printers	Access Direct support for Printers when Direct Support is enabled on a device.	None
Processes	Access Direct support for Processes when Direct Support is enabled on a device.	None
Registry	Access Direct support for Processes when Direct Support is enabled on a device.	None
Services	Access Direct support for Services when Direct Support is enabled on a device.	None
Startup Applications	Access Direct support for Start up Applications when Direct Support is enabled on a device.	None
Task Execution	Access Direct support for Task Execution when Direct Support is enabled on a device.	None

Downloads
Feature	Permission	Menu
Agent Logs Download	Access to download agent logs in the Device Details > Settings > Local Agent.	None
N-central Installers Download	Access and download fresh installs and upgrades of the agent/probe software. In order to allow a user to download the agent installers, the following permissions are required to be set to Manage: Network Device > Add/Import Devices Downloads > N-central Installers Download	Actions > Download Agent/Probe
Third-party Software Download	Access and download 3rd party software.	Actions > Download Agent/Probe

Network Devices
Feature	Permission	Menu
Add/Import Devices	Download agent/probe software, view list of discovered assets, edit devices, and add/import devices. Enabled with Devices View > All Devices and Network Devices > Edit Device Settings.	N/A
Delete Devices	View list of discovered assets, edit devices, and delete devices. Enabled with Devices View > All Devices and Network Devices > Edit Device Settings.	N/A
Downtime	Configure downtime for devices.	N/A
Edit Device Settings	View job status and rules. View the device details, when enabled with Devices View > All Devices. View job status and rules. (Read-only) View the device details. (Read-only)	Views > Job Status (Manage & Read-only)
Move Devices	Move the added devices between customers/sites. Enabled with Devices View > All Devices and Network Devices > Edit Device Settings.	N/A
Registration Tokens	Enables users to view and regenerate customer-specific registration tokens on the Download Agent/Probe Software page. Users can modify default token expiry with propagate, refreshing tokens, on the Administration > Defaults > Agent & Probe Settings page. Users can revoke Registration Tokens on the Administration > Defaults > Agent & Probe Settings page.	N/A
Update Asset Info	Enable the Add task > Update Asset Info menu option on the Device Details page of a device.	None on side menu. Enables the Add task > Update Asset Info menu option on the Device Details page of a device. When set to NONE, the menu becomes grayed out.

Mobile Devices
Feature	Permission	Menu
Add Devices and Profiles	Download agent/probe software, import devices, access mobile device invitations, manage APNS Certs, MDM Profile Servers and Mobile profiles. Mobile Device Settings View needs to be enabled as well. Enabled with Devices View > All Devices and Mobile Devices > Edit Device Settings.	Actions > Add/Import Devices Actions > Download Agent/Probe Configuration > Mobile Devices > Invitations Configuration > Mobile Devices > Manage APNS Certificate Configuration > Mobile Devices > MDM Profile Server Configuration > Mobile Devices > Profiles Administration > Certificate Management > Manage APNS Certificate
Delete Devices and Profiles	Delete devices and Mobile profiles. Enabled with Devices View > All Devices and Mobile Devices > Edit Device Settings.	N/A
Edit Device Settings	Used in conjunction with Mobile Devices permissions.	None

Remote Control
Feature	Permission	Menu
Custom	Configure Custom settings for device remote control.	None
Take Control	Configure Take Control settings for device remote control.	None
Property Locks	Configure Property Lock settings for device remote control.	None
Remote Control Settings	Configure Remote Control settings for device remote control.	None
Remote Desktop	Configure Remote Desktop connection settings for device remote control.	None
SSH	Configure SSH connection settings for device remote control.	None
Team Viewer	Configure Team Viewer connection settings for device remote control.	None
Telnet	Configure Telnet connection settings for device remote control.	None
Web	Configure Web connection settings for device remote control.	None

SaaS Devices
Feature	Permission	Menu
Add Devices	View and add SaaS devices. Enabled with Devices View > All Devices and SaaS Devices > Edit Device Settings.	None
Delete Devices	View and delete SaaS devices. Enabled with Devices View > All Devices and Mobile Devices > Edit Device Settings.	None
Edit Device Settings	Used in conjunction with Mobile Devices permissions. View the SaaS device settings. (Read-only)	None

Reporting

Analytics

Feature

Permission

Menu

Enable/Disable Data Export

Access to Advanced Reporting functionality.

Analytics > Dashboards

Reports

View Analytics dashboard, create and update reports.

View Analytics dashboard and reports. (Read-only)

Analytics > Dashboards

N-able N-central Reports

Feature

Permission

Menu

Enable/Disable Reports

Access to Administration > Defaults > Reports Control.

Administration > Defaults > Reports Control

Reports

View, export and email N-able N-central reports.

Reports > Administrative

Reports > Availability

Reports > Asset

Reports > Events

Reports > Metrics

Reports > Status

Reports > Scheduled Reports

Report Manager
Feature	Permission	Menu
Report Manager	Access to the Report Manager Reports console.	Views > Job Status Reports > Report Manager
Report Manager Admin	Access to the Report Manager Admin console.	None

The Report Manager permissions only affect the Product Admin account and the Report Manager admin account.

Tickets and Notifications

Ticketing

Feature

Permission

Menu

PSA Integration

Edit, Add, and update Configuring PSA Integration, Customer Settings and Ticketing, Export and Billing configuration.

Administration > PSA Integration > Configure PSA Integration

Administration > PSA Integration > Export Devices

Administration > PSA Integration > Billing Configuration

Administration > PSA Integration > Customer Mapping

Administration > PSA Integration > Customer Settings

Administration > PSA Integration > Ticketing

Ticketing

None

Notifications
Feature	Permission	Menu
Global Notification Control	Notification control via the bell icon in the upper-right corner of the N-able N-central window.	None
Notification Templates	Modify notification templates.	Administration > Defaults > Notification Templates
Profiles	Create new notification rules, edit notifications, test, delete add correlations. View the list of available notifications.(Read-only)	Configuration > Monitoring > Monitoring Setup Wizard Configuration > Monitoring > Notifications (Manage & Read-only)
Software Upgrade Notification	SIS access for upgrades and notifying users.	None