Updated: September 25, 2023

Permissions dictionary & menus

The permissions dictionary & menus is an overview of the permissions and what components of N-able N-central are enabled and available to the user. The Manage configuration enables the user to perform a task and a Read-Only configuration only allows the user to see the information or feature and not perform any action or task. The Menu column outlines the menus that become available when each permission in a role is enabled as either Manage or Read-Only.

API users require the same permissions as UI users would to be able to complete the same tasks. The API user would adhere to the same rules as any other user.

Which area do you want to view?

Administration

MSP N-central
Feature Permission Menu
Access LiveChat Enables and displays the LiveChat icon to connect with a N-able Support representative. No menus; enables LiveChat icon in upper-right corner of the user interface.
Access NetPath

View, create and delete NetPath paths for devices.

View NetPath paths list and path information, export path lists. (Read-only)

Views > NetPath (Manage & Read-only)
Access Topology Maps

View, scan, delete, add a new job.

View the maps. (Read-only)

Views>Topology  Maps
Administration Tools

Disk Diagnostics

SMTP Authentication

Test Email Delivery

Network Setup

Also includes outbound communication and the Welcome page when first logging in.

None
Certificates

Generate, upload and download certificates.

Manage APNS certificate.

None
System Backup and Restore Configure, download and restore system backups. None
System Defaults Modify system defaults.

Administration > Defaults > Agent & Probe Settings

Administration > Defaults > Backup and SNMP Defaults

Administration > Defaults > Customized System Email

Administration > Defaults > Data Retention

Administration > Defaults > Device Defaults

Administration > Defaults > Message Templates

Administration > Defaults > Remote Control Defaults

Administration > Defaults > Remote Control Log Level

Administration > Defaults > Service Templates

Administration > Defaults > Session Timeout

Administration > Defaults > Update Repository

Administration > Defaults > User Defaults

Administration > Defaults > Warranty Monitoring

Integration Management Enables the Integrations menu to manage and install integrated components into N-able N-central such as N-able Backup and EDR. Administration > Integrations > Integration Management
Microsoft Intune

Create and edit profiles of any kind.

Activate/Deactivate Intune based on assigned Access Group.

Integrations>Microsoft Intune
N-able EDR

Enables the user to install EDR on devices and monitor status and view reports.

View EDR status and reports for a device. (Read-only)

None

 

Custom Properties
Feature Permission Menu
Create/Edit/Delete

View custom properties, select from drop-down choice list properties and edit text, date and URL properties for a device or organization level.

View custom properties assigned to a device or organization level. (Read-only)

Administration > Custom Properties
View/Set Set the custom properties on devices and customers. No menus affected.
  Custom properties appear in filters regardless of Custom Property permissions.

 

Reference
Feature Permission Menu
My Links

Add and delete links.

View and click available links. (Read-only)

MyLinks and all available links. If Read-Only is selected, Manage My Links is not available
RSS Access and read RSS messages. (Read-only) Help > RSS Updates
Support Tools Available at the System level. Includes Agent Logs, Log Level, View Logs, Session Timeout and Server Code Drops menus.

Administration Utilities > Active Sessions

Administration Utilities > Agent/Probe Configuration

Administration Utilities > Agent Logs

Administration Utilities > Log Levels

Administration Utilities > Server Code Drops

Administration Utilities > Session Timeout

Administration Utilities > View Logs

System Upgrade Fail Message Displays the message when logging in on the Welcome page when the upgrade fails. None
What's New Training Videos and Help Resources Access and read videos and online help. (Read-only)

Help > What's New

Help > Training Videos

Help > Version Information

Help > Help

 

SO/Customers/Site
Feature Permission Menu
Branding Ability to brand a Service Organization, Customer or Site. Administration > Branding
Create SO/Customer/Site Ability to create a new SO, customer or site.

Actions > Add Customer

Administration > Customers

 

User Management
Feature Permission Menu
Access Groups

Add, edit and delete Access Groups.

View Access Groups and their details. (Manage & Read-only)

Administration > User Management > Access Groups (Manage & Read-only)

Roles

Add edit and delete Roles.

View Roles and their details. (Manage & Read-only)

Administration > User Management > Roles (Manage & Read-only)
Users

Add users.

Configure LDAP Servers.

Configure two-factor authentication.

Configure password system settings and complexity rules.

View Users and their details. (Read-only)

Administration > User Management > LDAP Servers

Administration > User Management > Two-Factor Authentication

Administration > User Management > Users

 

Configuration

Asset Discovery
Feature Permission Menu
Discovery Jobs

Add and edit discovery jobs.

Import assets.

Import discovered devices.

Ignore discovered devices.

Delete discovered devices.

Set device class.

Set the license mode.

Retrieve registration tokens. For a user to be able to retrieve registration tokens, Discovery Jobs will need to be set to Manage.

View discovered assets. (Read-only)

View available discovery jobs. (Read-only)

Views > Job Status (Manage & Read-only)

Actions > Add/Import Devices

Actions > Download Agent/Probe

Actions > Run a Discovery

Configuration > Asset Discovery > Discovery Jobs (Manage & Read-only)

Configuration > Monitoring > Monitoring Setup Wizard

Administration > Defaults > Discovery Defaults

Administration > Probes (Manage & Read-only)

Backup
Feature Permission Menu
Profiles

Add and edit profiles for the Arcserve Backup Manager.

View profiles and their settings for Arcserve backup. (Read-only)

Configuration > Backup Manager > Arcserve > Backup Share

Configuration > Backup Manager > Arcserve > Profiles (Manage & Read-only)

 

Compliance
Feature Permission Menu
Application

Add/edit application compliance rules.

Enable the status and delete rules.

Export application compliance rules.

Set the compliance settings.

View application compliance rules and settings. (Read-only)

View application compliance associations. (Read-only)

Configuration > Monitoring > Application Compliance Rules (Manage & Read-only)

Configuration > Monitoring > Application Compliance Settings (Manage & Read-only)

License   N/A

 

Domain User Management
Feature Permission Menu
Domain User Management Enable/disable/unlock domain users.

Action > Domain User Management

Configuration > Domain User Management

 

Monitoring
Feature Permission Menu
Alerts Acknowledge Acknowledge alerts. N/A
Custom Services Create custom services. Administration > Service Management > Custom Services
Filters

Add and edit custom filters, view default filters in the Configuration menu and within a device view.

View available custom and default filters in the Configuration menu. (Read-only)

Configuration > Filters (Manage & Read-only)
Rules

Add, edit and view rules. Note that License Compliance, Service Templates, Patch Configuration, All Devices View, LAN/WAN Devices and Notification Templates must also be enabled.

View available rules. No other permissions need to be enabled.(Read-only)

Configuration > Monitoring > Monitoring Setup Wizard

Configuration > Monitoring > Rules (Manage & Read-only)

Service Control Enable and disable services. Administration > Service Management > Service Control
Service Templates

Add, edit, import service templates, use the Monitoring Setup Wizard to add a template, view the job status.

View service templates and job status. (Read-only)

Views > Job Status (Manage & Read-only)

Configuration > Monitoring > Monitoring Setup Wizard

Configuration > Monitoring > Service Templates (Manage & Read-only)

Administration > Service Management > Service Templates (Manage & Read-only)

Services/Tasks View job status. (Manage & Read-only)  

 

N-able Backup
Feature Permission Menu
Cove Backup View the Cove Data Protection menu in the navigation. Left hand navigation menu for Cove Data Protection
Dashboard View dashboard and configure device properties for the dashboard. Cove Data ProtectionN-able Backup> Dashboard
Device Passphrase N/A None
Profiles Add, edit delete MSP Backup profiles. Note that LAN Device Settings View, Device Rules View, Patch configuration, Scheduled Tasks, Security Manager and Notifications permissions need to be enabled. Cove Data ProtectionN-able Backup> Profiles

 

Patch
Feature Permission Menu
Patch Approval

Add, delete, enable/disable automatic approvals, patching by device and by patch. View the Patch Management home page.

LAN Device settings, N-able N-central Reports, SaaS Device settings need to be enabled.

The following permissions are required to be set to Manage:

Network Device > Edit Device Settings
MSP N-central Reports > Reports
SaaS Devices > Edit Device Settings

Actions > Patch Approvals > Automatic Approvals

Actions > Patch Approvals > By Device

Actions > Patch Approvals > By Patch

Configuration > Patch Management

Patch Configuration Add patch profiles and rules. Configuration > Patch Management

 

Scheduled Tasks
Feature Permission Menu
Automation Manager Launch and use AM to create policies. Actions > Start Automation Manager
File Repository

Access, add and delete files from the Script/Software Repository.

View files and their details in the Script/Software repository. (Read-only)

Configuration > Scheduled Tasks > Scripts/Software Repository (Manage & Read-only)
Scheduled Tasks

View job status.

View and run actions.

Add/Delete scheduled tasks, network shares and scheduled task profiles.

Views > Job Status

Actions > Export Last Recovery Point

Actions > File Transfer

Actions > Push Third Party Software

Actions > Run a Backup

Actions > Run a Mac Script

Actions > Run an Automation Policy

Actions > Run a script

Actions > Security Manager Scan > AV Defender Custom Scan

Actions > Security Manager Scan > AV Defender Full Scan

Actions > Security Manager Scan > AV Defender Quick Scan

Configuration > Scheduled Tasks > Add/Delete

Configuration > Scheduled Tasks > Network Share

Configuration > Scheduled Tasks > Profiles

 

Security/AV
Feature Permission Menu
Disk Encryption Manager (Recovery Key Management) Access to the Retrieve Recovery Code button in the device's SettingsSecurity Manager menu. N/A
Profiles

Add, edit and delete AV Profiles for workstations and servers.

View the available AV Profiles. (Read-only)

Configuration > Security Manager > Profiles (Manage & Read-only)
Quarantine Management View, delete and restore quarantined files. Configuration > Security Manager > Quarantine Management (Manage & Read-only)
Recovery Key Report Report Access to the Recovery Key report. N/A
Security Events View security events. (Manage & Read-only) Configuration > Security Manager > Security Events (Manage & Read-only)
Security Exclusions

Add, edit and delete global exclusions for processes, files/folders and network scans.

View available global exclusions. (Read-only)

Configuration > Security Manager > Global Exclusions (Manage & Read-only)
Update Servers

View, enable/disable and configure update servers.

View a list of available update servers. (Read-only)

Configuration > Security Manager > Update Servers (Manage & Read-only)

Devices

Device Management for Apple
Feature Permission Menu
Apple Business Manager View and manage Apple Business Manager tokens. Configuration > Device Management for AppleApple Business Manager (Manage & Read only)
Apps & Books View, manage, and distribute App Store purchases. Configuration > Device Management for Apple > Apps & Books (Manage & Read only)
Certificates View, add, and manage available certificates.

View the list of added certificates. (Read-only)

Configuration > Device Management for Apple > Push Certificates (Manage & Read-only)

Command Execution Send the command to workstations.

All Devices > DMA > Commands > Lock Device

All Devices > DMA > Commands > Restart Device

All Devices > DMA > Commands > Remote Wipe

All Devices > DMA > Commands > Update Device Information

All Devices > DMA > Commands > Shutdown Device

All Devices > DMA > Commands > Command History

Profile Deployment View and manage devices and deploy profiles.

View devices and profiles. (Read-only)

Device > Settings > Device Management for Apple > Enable User Prompt for Device Enrollment

All Devices > DMA > Enrollment Helper > Enable

All Devices > DMA > Enrollment Helper > Disable

Configuration > Device Management for Apple >Profile Deployment (Manage & Read-only)

Profile Library

View, upload, and manage configuration profiles.

View the list of added configuration profiles. (Read-only)

Configuration > Device Management for Apple > Profile Library (Manage & Read-only)

 

Audit Trail
Feature Permission Menu
Audit Trail View the available audit trails. (Read-only) None

 

Devices View
Feature Permission Menu
Active Issues View active issues for devices. (Read-only) Views > Active Issues (Read-only)
All Devices View the list of available devices. (Read-only) Views > All Devices (Read-only)
Dashboards

View available dashboards and add new dashboards.

View available dashboards. (Read-only)

Views > Device - Network Devices (Manage & Read-only)

Views > Device - Printers (Manage & Read-only)

Views > Device - Servers (Manage & Read-only)

Views > Manage Dashboards

Other available Dashboards (Manage & Read-only)

 

Direct Support
Feature Permission Menu
Applications Access Direct support for Applications when Direct Support is enabled on a device. None
Command Prompt Access Direct support for Command Prompt when Direct Support is enabled on a device. None
File System Access Direct support for the File System when Direct Support is enabled on a device. None
Power Management Access Direct support for Power Management when Direct Support is enabled on a device. None
Printers Access Direct support for Printers when Direct Support is enabled on a device. None
Processes Access Direct support for Processes when Direct Support is enabled on a device. None
Registry Access Direct support for Processes when Direct Support is enabled on a device. None
Services Access Direct support for Services when Direct Support is enabled on a device. None
Startup Applications Access Direct support for Start up Applications when Direct Support is enabled on a device. None
Task Execution Access Direct support for Task Execution when Direct Support is enabled on a device. None

 

Downloads
Feature Permission Menu
Agent Logs Download Access to download agent logs in the Device DetailsSettingsLocal Agent. None
N-central Installers Download

Access and download fresh installs and upgrades of the agent/probe software.

In order to allow a user to download the agent installers, the following permissions are required to be set to Manage:

Network Device > Add/Import Devices
Downloads > N-central Installers Download

Actions > Download Agent/Probe
Third-party Software Download Access and download 3rd party software. Actions > Download Agent/Probe

 

Network Devices
Feature Permission Menu
Add/Import Devices

Download agent/probe software, view list of discovered assets, edit devices, and add/import devices.

Enabled with Devices ViewAll Devices and Network Devices > Edit Device Settings.

N/A
Delete Devices

View list of discovered assets, edit devices, and delete devices.

Enabled with Devices ViewAll Devices and Network Devices > Edit Device Settings.

N/A
Downtime Configure downtime for devices. N/A
Edit Device Settings

View job status and rules.

View the device details, when enabled with Devices View > All Devices.

View job status and rules. (Read-only)

View the device details. (Read-only)

Views > Job Status (Manage & Read-only)

Move Devices

Move the added devices between customers/sites.

Enabled with Devices ViewAll Devices and Network Devices > Edit Device Settings.

N/A
Registration Tokens

Enables users to view and regenerate customer-specific registration tokens on the Download Agent/Probe Software page.

Users can modify default token expiry with propagate, refreshing tokens, on the Administration > Defaults > Agent & Probe Settings page.

Users can revoke Registration Tokens on the Administration > Defaults > Agent & Probe Settings page.

N/A

Update Asset Info Enable the Add taskUpdate Asset Info menu option on the Device Details page of a device. None on side menu. Enables the Add taskUpdate Asset Info menu option on the Device Details page of a device. When set to NONE, the menu becomes grayed out.

 

Mobile Devices
Feature Permission Menu
Add Devices and Profiles

Download agent/probe software, import devices, access mobile device invitations, manage APNS Certs, MDM Profile Servers and Mobile profiles. Mobile Device Settings View needs to be enabled as well.

Enabled with Devices ViewAll Devices and Mobile Devices > Edit Device Settings.

Actions > Add/Import Devices

Actions > Download Agent/Probe

Configuration > Mobile Devices > Invitations

Configuration > Mobile Devices > Manage APNS Certificate

Configuration > Mobile Devices > MDM Profile Server

Configuration > Mobile Devices > Profiles

Administration > Certificate Management > Manage APNS Certificate

Delete Devices and Profiles

Delete devices and Mobile profiles.

Enabled with Devices ViewAll Devices and Mobile Devices > Edit Device Settings.

N/A

Edit Device Settings Used in conjunction with Mobile Devices permissions. None

 

Remote Control
Feature Permission Menu
Custom Configure Custom settings for device remote control. None
Take Control Configure Take Control settings for device remote control. None
Property Locks Configure Property Lock settings for device remote control. None
Remote Control Settings Configure Remote Control settings for device remote control. None
Remote Desktop Configure Remote Desktop  connection settings for device remote control. None
SSH Configure SSH connection settings for device remote control. None
Team Viewer Configure Team Viewer connection settings for device remote control. None
Telnet Configure Telnet connection settings for device remote control. None
Web Configure Web connection settings for device remote control. None

 

SaaS Devices
Feature Permission Menu
Add Devices

View and add SaaS devices.

Enabled with Devices ViewAll Devices and SaaS Devices > Edit Device Settings.

None
Delete Devices

View and delete SaaS devices.

Enabled with Devices ViewAll Devices and Mobile Devices > Edit Device Settings.

None
Edit Device Settings

Used in conjunction with Mobile Devices permissions.

View the SaaS device settings. (Read-only)

None

Reporting

Analytics
Feature Permission Menu
Enable/Disable Data Export Access to Advanced Reporting functionality. Analytics > Dashboards
Reports

View Analytics dashboard, create and update reports.

View Analytics dashboard and reports. (Read-only)

Analytics > Dashboards

 

N-able N-central Reports
Feature Permission Menu
Enable/Disable Reports Access to Administration Defaults Reports Control. Administration > Defaults > Reports Control
Reports View, export and email N-able N-central reports.

Reports > Administrative

Reports > Availability

Reports > Asset

Reports > Events

Reports > Metrics

Reports > Status

Reports > Scheduled Reports

 

Report Manager
Feature Permission Menu
Report Manager Access to the Report Manager Reports console. Views > Job Status Reports > Report Manager
Report Manager Admin Access to the Report Manager Admin console. None

The Report Manager permissions only affect the Product Admin account and the Report Manager admin account.

Tickets and Notifications

Ticketing
Feature Permission Menu
PSA Integration Edit, Add, and update Configuring PSA Integration, Customer Settings and Ticketing, Export and Billing configuration.

Administration > PSA Integration > Configure PSA Integration

Administration > PSA Integration > Export Devices

Administration > PSA Integration > Billing Configuration

Administration > PSA Integration > Customer Mapping

Administration > PSA Integration > Customer Settings

Administration > PSA Integration > Ticketing

Ticketing None

 

Notifications
Feature Permission Menu
Global Notification Control Notification control via the bell icon in the upper-right corner of the N-able N-central window. None
Notification Templates Modify notification templates. Administration > Defaults > Notification Templates
Profiles

Create new notification rules, edit notifications, test, delete add correlations.

View the list of available notifications.(Read-only)

Configuration > Monitoring > Monitoring Setup Wizard

Configuration > Monitoring > Notifications (Manage & Read-only)

Software Upgrade Notification SIS access for upgrades and notifying users. None