Skip to main content
Lizzie
LizzieCommunity Manager
Community Manager
June 13, 2025

[PRODUCT UPDATE] Zero-touch enhancement: New admin controls

Related products:Android Enterprise
  • June 13, 2025
  • 5 replies
  • 42 views

Hello everyone,


We're thrilled to announce significant enhancements to the zero-touch customer portal, designed to provide greater control over customer data. The portal's role-based access control has been updated to include three new user roles, ‘Manager’, ‘Assigner’, ‘Viewer’, for greater control of the data and capabilities each portal user has access to.

 

 

Read this Help Center guide to learn about these new roles and how to add users to these new roles. 

 

Migration Timeline:  This is now available. 

 

We know many of you are excited to have this new capability, thank you to those of you who provided feedback and input.

 

It would be fantastic to hear your thoughts, are you planning on using these new roles in your organisation or any additional questions, below.

 

Thank so much.

 

*Timeline updated 24 June, 2025

      5 replies

      Flo
      Flo
      Level 2.0: Eclair
      June 19, 2025

      After reading the table, it's actually not going to work for us. I hope that an evolution will allow us to modify the rights of the roles. :(

        JordanOC
        JordanOCCommunity Manager
        Community Manager
        June 19, 2025

        Hi Flo,


        Would you be able to provide a bit of a description of the role/permissions you would be after? Feel free to use the table above and modify one of the roles for better visualisation.

         

        You can message me directly if you'd prefer :)

         

        Thanks,

         

        Jordan

          Flo
          Flo
          Level 2.0: Eclair
          June 19, 2025

          Hi @JordanOC ,

          Here is the updated table for the three new roles (names and rights) :

          it's not a big deal if the viewers can view the resellers, but it's not necessarily useful. it doesn't matter if it stays like that.

            jasonbayton
            jasonbayton
            Level: 4.1: Jelly bean
            June 19, 2025

            This looks like a comprehensive baseline to start from, and I think it logically separates the tiered support & access levels in bigger orgs, so no qualms.

             

            If I were to nitpick I'd ask why managers can't remove devices or handle resellers, but it looks like a small bump over assigner just to look after configurations so that makes sense. 

             

            Admins I'd ask why they've been excluded from ZT and TOS. TOS I suppose you could argue.. but linking ZT feels like an admin task since they can do everything else with devices. 

             

            Either way, this solves a need. Thank you!

              Frebel
              Frebel
              Level 1.6: Donut
              June 27, 2025

              Thanks for implementing this!

                Lizzie
                LizzieCommunity ManagerAuthor
                Community Manager
                July 4, 2025

                Hey everyone, 

                 

                It's great to see you are exploring the new admin controls, thank you for your replies here. 

                 

                Reading through the comments in this topic and also in another zero-touch thread, it looks like some of you would ideally like some tweaks, particularly to the 'Assigner' role. Thanks for this additional feedback - I'd really like to pass this back to the zero-touch product team.

                 

                To make sure I'm capturing your thoughts correctly, I wonder if you might be able to provide me with a bit more information/context around the following points please?

                 

                • For users that need to remove devices are there any reasons, are there any specific reasons why they can’t be an 'Admin' role holder? 
                • Would you be interested in a role that is a combination of 'Assigner' and 'Manager', but with the addition of removing devices? Or is the separation of configuration creation and assignment required?
                • Does that additional role need to have batch operations?

                @Flo, @jasonbayton, @Michel, @Rakib, @jeoffreyburri, (and anyone else who has thoughts on this). 

                 

                Thanks again, looking forward to hearing from you (and happy Friday). 

                 

                Lizzie

                Welcome to the Community everyone!
                  Flo
                  Flo
                  Level 2.0: Eclair
                  July 7, 2025

                  Hi Lizzie,

                  Users who have a role in assigning a configuration to a device or deleting a device (as well as performing mass deletion) are our Level 2 support, while viewing is handled by our Level 1 support. Adding/removing resellers or configurations commits the company and is performed by admins (or potentially, for configurations, by the specific role dedicated to adding/removing configurations, but we do not have an immediate need for this on our side).

                  I'm reposting the table as I had initially envisioned it below (with different roles names for Assigner and Manager) :

                   

                   

                    J
                    jnelson_RH
                    September 19, 2025

                    Hello,  I am having issues with assigning a new user with any of the roles.   Can you direct me to who can help?  

                    Michel
                    Michel
                    Level 4.0: Ice cream sandwich
                    September 22, 2025

                    What issues are you experiencing? Could you clarify a bit more? 

                      Lizzie
                      LizzieCommunity ManagerAuthor
                      Community Manager
                      September 22, 2025

                      Thanks @Michel for your help here. 

                       

                      @jnelson_RH just to highlight Michel's message here and to also check do you have the 'Owner' role to add new roles? If you could provide more info that would be a great help. 

                       

                      Thanks so much. 😀

                      Welcome to the Community everyone!
                      Terms & ConditionsCookie settingsAccessibility statement