Skip to content
English
  • There are no suggestions because the search field is empty.

Orchestry Roles and the Access Control Page

In this article, learn about the user roles available in Orchestry and how to manage access

Orchestry allows admins to manage different user roles within the platform.  The scope of these roles will depend on the Orchestry subscription plan.

Interested in learning more about Orchestry Enterprise plan features?
Learn more: Orchestry Pricing & Plans

 

Orchestry Roles Overview

The following roles are available for Starter and Professional Plan subscriptions:

ROLE

SCOPE

NOTES

Platform Admin

Full platform access

Tenant Global Admin always has this implicitly. Can also be explicitly assigned to users.

Health Check Viewer

Health Checks (read-only)

Users only (no group support). Cannot action recommendations or edit annotations.

Health Check Reviewer

Health Check review workflow

Only visible when Review Process = Self-Led. Configured in Settings > Health Check.

Workspace Default Approver

Approval workflow

Receives approval requests. Not a page-access role. Users only (no group support).

Workspace Requests

Provisioning access

Controls who can submit workspace requests. Groups only (no individual users). If empty, all users can request.

Partner Hub Admin

Partner Tools

Only visible on Partner Hub tenants. Users only (no group support).

Partner Manager

Partner tenant management

Only visible on Partner Hub tenants. Configured in Partner Tools settings.

 

For Enterprise subscribers, role-based access controls are available in addition to everything available in Starter and Professional plans.

ROLE

SCOPE

SUPPORTS GROUPS

Templates Admin

Templates section + Templates settings

Yes

Workspaces Admin

Workspaces section + Copilot + Workspace settings

Yes

OneDrive Admin

OneDrive section + OneDrive settings

Yes

Guests Admin

Guests section + Guest settings

Yes

Licenses Admin

Licenses section + License settings

Yes

 

The Access Control Page

The 'Access Control' page (Settings > Access Control) provides admins a comprehensive location to manage all user roles in Orchestry.  

The role options available on this page will depend on your Orchestry subscription.

kb-RolesAccess-01

 

Role-Based Access (Enterprise Only)

For Enterprise subscriptions, admins can be divided into more granular roles to ensure people only have access to the areas of Orchestry they need.

kb-RolesAccess-03

 

The History Tab (Enterprise Only)

The history tab provides a report of roles changes over time for review and auditing purposes

kb-RolesAccess-02