User roles

Remote Manager allows users with certain roles and privileges to perform operations, such as making changes or setting up device operations. Each user must be assigned a role when a user account is created. Only users assigned an administrator role can create an unlimited number of additional role-based user accounts. See Add a user for information about adding new users.

Note The first user created for a customer account is designated by default as the account owner. The account owner also has privileges, even though the account owner is not a user role that can be assigned to a user. See Determine the Account owner for more information.

Summary of user roles

The following table summarizes Remote Manager user roles.

User Role	Permitted Actions
Administrator	Full read/write access to all administrator-only and user-based features within the account, either via web interface or REST APIs. Only administrators can add or remove users, make changes to a user account, change the destination email for device notifications, or update carrier accounts. There must be at least one administrator for each customer account. The account owner is assigned the administrator role by default.
User	Read/write access to all resources except administrator-only features, either via web interface or REST APIs. Only users with full user privileges (not read-only) may add or remove devices, or make changes to device alarms and schedules.
Read-only user	Read-only access to user-based features, either via web interface or REST APIs.
Application	Read/write access to user-based features and can run commands via REST APIs. Application credentials cannot be used to log in to the web interface.
Read-only Application	Read-only access to user-based features. Can perform operations but cannot run commands that require write privileges, such as uploading files. Application credentials cannot be used to log in to the web interface.