User Roles

Access and permissions are based on user roles.

• Identify Admins (Customer Admin), Group Admins (Customer Group Admins), and contacts for your account in Account page.
• Manage users from the Users tab of your Access Control page.

Admin

Has full administrative access to the Bitsight account, including having insight into product usage of various users and the ability to delegate the management of portfolios to division leaders and other departments.

Admins can create groups, modify groups, add users to any group, change the company limit for each group, change distribution list settings, and add companies to any group.

If all administrators left the company, contact Bitsight Support to regain full admin access.

Slug Name: customer_admin

Group Admin❖

This user is associated with an Access Control Group. Companies can put multiple Group Admin in place, each of whom would be responsible for a business unit, department, or country division, without needing to provide the full administrative privileges of an Admin. Group Admin do not see that they are in a group.

Group Admin can modify other users and companies for their group; including add or remove companies to the group, add or remove users to the group, and add other Group Admins to their group.

Group Admin cannot modify an account’s distribution list settings, add additional groups, change group limits, modify users who are not part of the group, or assign users as an Admin.

Slug Name: customer_group_admin

Portfolio Manager❖

This user is associated with an Access Control Group. Companies can put multiple Portfolio Managers in place, each of whom would be responsible for a business unit, department, or country division, without needing to provide the full administrative privileges of an Admin.

Portfolio Managers can add companies to their group.

They cannot modify an account’s distribution list settings, add additional groups, change group limits, or create and manage users for their group.

Slug Name: customer_portfolio_manager

User

This is a “read-only” role that cannot make any significant changes to the organization's settings or subscriptions. This basic access role has full access to the Bitsight platform and all add-ons the organization has purchased.

Users can view companies in the portfolio, create and share folders, submit support tickets, examine events, download/export documents (PDF and CSV).

Slug Name: customer_user

None

This role does not have access to the applications.

Slug Name: none