Blog Post

Product news & info
1 MIN READ

[PRODUCT UPDATE] Zero-touch enhancement: New admin controls

Lizzie's avatar
Lizzie
Google Community Manager
29 days ago

Hello everyone,


We're thrilled to announce significant enhancements to the zero-touch customer portal, designed to provide greater control over customer data. The portal's role-based access control has been updated to include three new user roles, ‘Manager’, ‘Assigner’, ‘Viewer’, for greater control of the data and capabilities each portal user has access to.

 

 

Read this Help Center guide to learn about these new roles and how to add users to these new roles. 

 

Migration Timeline:  This is now available. 

 

We know many of you are excited to have this new capability, thank you to those of you who provided feedback and input.

 

It would be fantastic to hear your thoughts, are you planning on using these new roles in your organisation or any additional questions, below.

 

Thank so much.

 

*Timeline updated 24 June, 2025

Updated 18 days ago
Version 6.0
Product Updates
Zero-touch

10 Comments

  • Flo's avatar
    Flo
    Level 2.0: Eclair
    23 days ago

    After reading the table, it's actually not going to work for us. I hope that an evolution will allow us to modify the rights of the roles. :(

    • JordanOC's avatar
      JordanOC
      Google Team
      23 days ago

      Hi Flo,


      Would you be able to provide a bit of a description of the role/permissions you would be after? Feel free to use the table above and modify one of the roles for better visualisation.

       

      You can message me directly if you'd prefer :)

       

      Thanks,

       

      Jordan

      • Flo's avatar
        Flo
        Level 2.0: Eclair
        23 days ago

        Hi JordanOC​ ,

        Here is the updated table for the three new roles (names and rights) :

        it's not a big deal if the viewers can view the resellers, but it's not necessarily useful. it doesn't matter if it stays like that.

    • jasonbayton's avatar
      jasonbayton
      Level 4.0: Ice Cream Sandwich
      23 days ago

      E: Jordan covered it :)

  • jasonbayton's avatar
    jasonbayton
    Level 4.0: Ice Cream Sandwich
    23 days ago

    This looks like a comprehensive baseline to start from, and I think it logically separates the tiered support & access levels in bigger orgs, so no qualms.

     

    If I were to nitpick I'd ask why managers can't remove devices or handle resellers, but it looks like a small bump over assigner just to look after configurations so that makes sense. 

     

    Admins I'd ask why they've been excluded from ZT and TOS. TOS I suppose you could argue.. but linking ZT feels like an admin task since they can do everything else with devices. 

     

    Either way, this solves a need. Thank you!

  • Frebel's avatar
    Frebel
    Level 1.5: Cupcake
    15 days ago

    Thanks for implementing this!

  • Lizzie's avatar
    Lizzie
    Google Community Manager
    8 days ago

    Hey everyone, 

     

    It's great to see you are exploring the new admin controls, thank you for your replies here. 

     

    Reading through the comments in this topic and also in another zero-touch thread, it looks like some of you would ideally like some tweaks, particularly to the 'Assigner' role. Thanks for this additional feedback - I'd really like to pass this back to the zero-touch product team.

     

    To make sure I'm capturing your thoughts correctly, I wonder if you might be able to provide me with a bit more information/context around the following points please?

     

    • For users that need to remove devices are there any reasons, are there any specific reasons why they can’t be an 'Admin' role holder? 
    • Would you be interested in a role that is a combination of 'Assigner' and 'Manager', but with the addition of removing devices? Or is the separation of configuration creation and assignment required?
    • Does that additional role need to have batch operations?

    Flo​, jasonbayton​, Michel​, Rakib​, jeoffreyburri​, (and anyone else who has thoughts on this). 

     

    Thanks again, looking forward to hearing from you (and happy Friday). 

     

    Lizzie

    • Flo's avatar
      Flo
      Level 2.0: Eclair
      5 days ago

      Hi Lizzie,

      Users who have a role in assigning a configuration to a device or deleting a device (as well as performing mass deletion) are our Level 2 support, while viewing is handled by our Level 1 support. Adding/removing resellers or configurations commits the company and is performed by admins (or potentially, for configurations, by the specific role dedicated to adding/removing configurations, but we do not have an immediate need for this on our side).

      I'm reposting the table as I had initially envisioned it below (with different roles names for Assigner and Manager) :