Custom Team Administrator roles with setup examples

This document is for:

Invicti Enterprise On-Demand, Invicti Enterprise On-Premises

In Invicti, you have access to both the built-in Team Administrator role and the option to create custom Team Administrator roles. This document focuses on the custom Team Administrator role.

For information on configuring more restricted roles tailored to your specific needs, refer to the "Team Administrator capabilities and how to assign the role" document.

Restricted Team Administrator Roles

As a System Administrator, you might wish to limit the control that a Team Administrator has over role assignments. You can do this by making custom team administrator roles and using the Edit My Team's Roles permission.

While this permission doesn't do anything on its own, you can combine it with other roles to give a member restricted Team Administrator privileges, rather than granting full control like the default Team Administrator role.

Here, we've explained how to create two types of custom team administrator roles:

Team-Focused Team Administrator Role: This type limits a Team Administrator's role to managing role assignments for the entire team only. They cannot adjust roles for individual members.
Member-Focused Team Administrator Role: This type restricts a Team Administrator to adjusting role assignments solely for individual team members. They cannot assign roles for the team as a whole.

How the team-focused role works and an example of how to set it up

With this custom Team Administrator role:

You can handle role assignments for your team collectively
Your team members get access based on their assigned roles
You can assign any role you have, except:

Custom roles with "Edit my Team's Roles" permission
The default Team Administrator role

You cannot modify or erase team data
You cannot view the data of individual team members

To set it up, follow these steps:

Log in to Invicti Enterprise as a System Administrator.
From the side menu, select Team > Manage Roles.
On the Roles page, click + New Role.

On the New Role page, set the Name for your new custom role. In the example below we have set the name to Team Admin :: Team-Centric.

From the Permissions list, enable the following permissions:

Edit My Team's Roles
Edit Team
View Team List
View Website Group List

Click Save at the bottom of the page.

How the member-focused role works and an example of how to set it up