The following table lists all the role privileges available in the Operator portal.

The following table lists all the role privileges available in the Partner portal.

The following table lists all the role privileges available in the Enterprise portal.

The columns in the table indicate the following:
  • Allow Privilege – Does the user role has allow access?
  • Deny Privilege – Does the user role has deny access?
  • Customizable – Is the role privilege available for customization in the Role Customization window?
Feature Name of the Role Privilege Description Allow Privilege Deny Privilege Customizable
Manage Customers Create Customer Grants ability to view and manage Enterprise Customers as an Operator or a Partner Yes No No
Read Customer
Update Customer Yes Yes
Delete Customer No No
Manage Customer
Manage Partners Create Partner Grants ability to view and manage Partners Yes No No
Read Partner
Update Partner
Delete Partner
Manage Partner
Software Images Create Software Package Grants access to upload and assign Edge Software Images and Application Maps Yes Yes Yes
Read Software Package
Update Software Package
Delete Software Package
Manage Software Package
System Properties Create System Property Grants access to view and manage System Properties Yes Yes No
Read System Property Yes
Update System Property No
Delete System Property No
Manage System Property Yes
Edit Restricted System Properties Controls the ability of user to edit restricted system properties Yes No No
Operator Events Create Operator Event Grants ability to view Operator events Yes Yes Yes
Read Operator Event
Update Operator Event
Delete Operator Event
Manage Operator Event
Operator Profiles Create Operator Profile Grants ability to view and manage Operator profiles Yes Yes Yes
Read Operator Profile
Update Operator Profile
Delete Operator Profile
Manage Operator Profile
View Tab Operator Profile Controls ability of the user to view and configure within the Operator profile menu No Yes Yes
Operator Users Create Operator User Grants ability to view and manage Operator administrative users Yes Yes No
Read Operator User Yes
Update Operator User No
Delete Operator User No
Manage Operator User Yes
Operator Users > API Tokens Create Operator Token Grants ability to view and manage the operator Authentication Tokens Yes No No
Read Operator Token
Update Operator Token
Delete Operator Token
Manage Operator Token
Gateway Pools Gateways Gateway Diagnostic bundles Create Gateway Grants ability to view and manage Gateway pools and Gateways as an Operator or a Partner Yes Yes Yes
Read Gateway
Update Gateway
Delete Gateway
Manage Gateway
View Tab Gateway List Controls the ability of user to view the list of Gateways No Yes Yes
Gateways > New Gateway Create Operator PKI Grants ability to view and manage Operator level PKI configuration including Gateway certificates and certificate authority Yes Yes No
Gateway > Gateway Authentication Mode Read Operator PKI Yes
Update Operator PKI No
Manage Operator PKI Yes
Gateway Diagnostic bundles > Download Diagnostic Bundles Download Gateway Diagnostics Grants ability to download Gateway Diagnostics No Yes Yes
Application Maps Create Software Package Grants access to upload and assign Edge software images and Application Maps Yes Yes Yes
Read Software Package
Update Software Package
Delete Software Package
Manage Software Package
Role Customization Create Role Customization Package Grants access to manage role customization packages Yes No No
Read Role Customization Package
Update Role Customization Package
Delete Role Customization Package
Manage Role Customization Package
Edge Licensing Create License Grants ability to view and manage Edge licensing Yes No No
Read License Yes Yes
Update License
Delete License No No
Manage License
CA Summary > Gateway Certificates > Revoke Certificate Read Operator PKI Grants ability to view and manage operator level PKI configuration including Gateway certificates and certificate authority Yes Yes Yes
Delete Operator PKI No
Manage Operator PKI Yes
Read Customer PKI Grants ability to view and manage Enterprise PKI settings Yes No No
Delete Customer PKI
Manage Customer PKI
Orchestrator Authentication > Operator Authentication Create Operator Authentication Grants ability to view and manage Operator authentication mode, like SSO, RADIUS, or Native Yes Yes Yes
Read Operator Authentication
Update Operator Authentication
Delete Operator Authentication
Manage Operator Authentication
Orchestrator Authentication > Enterprise Authentication Create Customer Authentication Grants ability to view and manage Customer authentication mode, like RADIUS or Native Yes Yes Yes
Read Customer Authentication
Update Customer Authentication
Delete Customer Authentication
Manage Customer Authentication
Replication Create Replication Grants access to view and configure Orchestrator disaster recovery Yes Yes No
Read Replication Yes
Update Replication No
Delete Replication
Manage Replication Yes
Orchestrator Diagnostics > Diagnostic Bundles Create Orchestrator Diagnostics Grants access to request and view Orchestrator diagnostic bundles Yes Yes Yes
Orchestrator Diagnostics > Database Statistics Read Orchestrator Diagnostics
Update Orchestrator Diagnostics
Delete Orchestrator Diagnostics
Manage Orchestrator Diagnostics
Orchestrator Upgrade for Standalone Create Software Package Grants access to upload and assign Edge software images and Application Maps Yes Yes Yes
Read Software Package
Update Software Package
Delete Software Package
Manage Software Package
Orchestrator Upgrade for DR Setup Create Replication Grants access to view and configure Orchestrator disaster recovery Yes Yes No
Read Replication Yes
Update Replication No
Delete Replication
Manage Replication Yes
User Agreements Create User Agreement Grants access to configure the customer user agreement Yes No No
Read User Agreement
Update User Agreement
Delete User Agreement
Manage User Agreement
Orchestrator Owners Manage Orchestrators Edge Inventory Create Edge Inventory Grants ability to view and manage Edge inventory as needed for Redirect configuration Yes No No
Read Edge Inventory
Update Edge Inventory
Delete Edge Inventory
Manage Edge Inventory
Feature Name of the Role Privilege Description Allow Privilege Deny Privilege Customizable
Manage Customers Create Customer Grants ability to view and manage Customers, from the Partner or Operator level Yes No No
Read Customer
Update Customer Yes Yes
Delete Customer No No
Manage Customer
Partner Events Create Partner Event Grants access to view Partner events Yes No No
Read Partner Event Yes Yes
Update Partner Event No No
Delete Partner Event
Manage Partner Event
Partner Admins Create Partner User Grants access to view and configure Partner administrators Yes No No
Read Partner User Yes Yes
Update Partner User No No
Delete Partner User
Manage Partner User
Partner Admins > API Tokens Create Partner Token Grants ability to view and manage operator authentication tokens Yes No No
Read Partner Token
Update Partner Token
Delete Partner Token
Manage Partner Token
Role Customization Create Role Customization Package Grants access to manage role customization packages Yes No No
Read Role Customization Package
Update Role Customization Package
Delete Role Customization Package
Manage Role Customization Package
Partner Overview Update Partner Grants access to view and Partners Yes No No
Partner Overview > Other Settings Read User Agreement Grants access to configure the customer user agreement feature Yes No No
Update User Agreement
Partner Settings Read Partner Delegation Grants ability to view and edit the delegation of Partner privileges to the Operator Yes No No
Partner Settings > General Information > Privacy Settings Read Customer Delegation Grants ability to view and manage the delegation of privileges from the customer to Partners or the Operator Yes Yes Yes
Update Customer Delegation No
Partner Settings > Authentication Create Partner Authentication Grants ability to view and edit Partner authentication mode and associated configuration Yes No No
Read Partner Authentication
Update Partner Authentication
Delete Partner Authentication
Manage Partner Authentication
Partner Settings > Authentication > API Tokens Create Partner Token Grants ability to view and manage operator authentication tokens Yes No No
Read Partner Token
Update Partner Token
Delete Partner Token
Manage Partner Token
Edge Licensing Create License Grants ability to view and manage Edge licensing Yes No No
Read License Yes Yes
Update License
Delete License No No
Manage License
Gateway Pools Gateways Gateway Diagnostic bundles Create Gateway Grants ability to view and manage Gateways, from the Partner or Operator level Yes Yes Yes
Read Gateway
Update Gateway
Delete Gateway
Manage Gateway
View Tab Gateway List Grants ability to view the Gateway list tab No Yes Yes
Gateway Diagnostic Bundles > Download Diagnostic Bundles Download Gateway Diagnostics Grants ability to download Gateway Diagnostics No Yes Yes
VeloCloud Support Access Role Create Partner Delegation Grants ability to view and edit the delegation of Partner privileges to the Operator Yes No No
Read Partner Delegation
Update Partner Delegation
Delete Partner Delegation
Manage Partner Delegation
Navigation Path in the Enterprise Portal Name of the Tab Elements in the Tab Name of the Role Privilege Description Allow Privilege Deny Privilege Customizable
Monitor > Edges > Select Edge Overview
Top Sources View Edge Sources Grants ability to view Monitor Edge Sources tab Yes Yes Yes
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
View User Identifiable Flow Stats Grants ability to view potentially user identifiable flow source attributes Yes Yes Yes

Top Applications

Top Categories

Top Operating Systems

Top Sources

 Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
View Flow Stats Grants ability to view collected flow statistics Yes Yes Yes
Sources Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
View Edge Sources Grants ability to view Monitor Edge Sources tab Yes Yes Yes
Devices View User Identifiable Flow Stats Grants ability to view potentially user identifiable flow source attributes Yes Yes Yes
Create Client Device Controls visibility to unique identifiers (IP or MAC address) of LAN-side client devices Yes No No
Read Client Device
Change Hostname Update Client Device
Delete Client Device
Manage Client Device
Operating Systems Create Client User Controls visibility to potentially Personal Identifiable Information(PII) in flow statistics Yes No No
Read Client User
Update Client User
Delete Client User
Manage Client User
Applications Sources Destinations Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
View Flow Stats Grants ability to view collected flow statistics Yes Yes Yes
Events from this Edge Read Customer Event Grants ability to view customer level events Yes No No
Remote Actions Read Remote Actions Grants access to view and execute remote actions No Yes Yes
Remote Actions Generate Diagnostic Bundle Remote Diagnostics Read Diagnostics Controls creation of and access to diagnostics bundles, both Edge and Gateway. Combine with Edge and Gateway privileges to control access to each type individually Yes Yes Yes
Generate Diagnostic Bundle Create Diagnostic Bundle No Yes Yes
Remote Diagnostics Read Remote Diagnostics Privilege granting access to view and execute remote diagnostics No Yes Yes
Monitor Edges Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Edge Cluster Read Edge Cluster Controls the ability to create and configure Edge Clusters No Yes Yes
Network Services Read Network Service Grants ability to view and manage services with the Network Services configuration block Yes No No
Non SD-WAN Destinations via Gateway Non SD-WAN Destinations via Edge Read Customer Event Grants ability to view customer level events Yes No No
Non SD-WAN Destinations via Gateway Non SD-WAN Destinations via Edge Read Non SD-WAN Destination via Gateway Grants ability to view and manage Non SD-WAN Destinations via Gateway and Non SD-WAN Destinations via Edge No Yes Yes
BGP Gateway Neighbor State Read Network Service Grants ability to view and manage services with the Network Services configuration block Yes No No
BGP Edge Neighbor State Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Edge VNFs Read VNF Network Service Grants ability to manage VNF Network Services No Yes Yes
Edge Cluster Read Edge Cluster Controls the ability to create and configure Edge Clusters No Yes Yes
Routing Read Network Addressing Grants ability to view and manage address block configuration in the legacy Network profile mode Yes No No
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
View Customer Routing Grants ability to view the customer Routing Yes No No
Alerts Create Customer Alert Grants ability to view and manage customer alert configuration and generated alerts Yes No No
Read Customer Alert Yes Yes
Update Customer Alert
Delete Customer Alert No No
Manage Customer Alert
Events Create Customer Event Grants ability to view customer level events Yes No No
Read Customer Event
Update Customer Event
Delete Customer Event
Manage Customer Event
Reports Update Customer Grants ability to view and manage Customers, from the Partner or Operator level Yes Yes Yes
Read Customer No No
Firewall Firewall Logging View Firewall Logs Grants ability to view collected firewall logs Yes Yes Yes
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Read Customer Event Grants ability to view customer level events Yes No No
Configure > Edges > Select Edge Edge Overview Edge Overview Controls ability to view or modify Edge overview page No Yes Yes
Properties Create Edge Overview Properties Controls ability to view or change items within the properties section of the Edge overview page No Yes Yes
Read Edge Overview Properties No No
Update Edge Overview Properties Yes Yes
Delete Edge Overview Properties
Name Read Edge Overview Properties Name Controls ability to view or change Edge name on the Edge overview page No Yes Yes
Update Edge Overview Properties Name
Description Read Edge Overview Properties Description Controls ability to view or change Edge description on the Edge overview page No Yes Yes
Update Edge Overview Properties Description
Enable Alerts Read Edge Overview Properties Enable Alerts Controls ability to view or change Edge alert configuration on the Edge overview page No Yes Yes
Update Edge Overview Properties Enable Alerts
Authentication Mode Read Edge Overview Properties Auth Mode Controls ability to view or change Edge PKI configuration on the Edge overview page No Yes Yes
Update Edge Overview Properties Auth Mode
Read Customer PKI Grants ability to view and manage enterprise PKI settings Yes No No
Update Customer PKI
Serial Number Read Edge Overview Properties Serial Number Controls ability to view or change Edge serial number, prior to activation, on the Edge overview page No Yes Yes
Update Edge Overview Properties Serial Number
Generate New Activation Key Read Edge Overview Properties Activation Expiration Controls ability to view or change the activation key expiration period on the Edge overview page No Yes Yes
Update Edge Overview Properties Activation Expiration
Send Activation Email button Create Edge Overview Properties Activation Email Controls ability to generate an activation email on the Edge overview page No Yes Yes
Read Edge Overview Properties Activation Email
Local Credentials Read Overview Properties Local Credentials Grants ability to view and configure Edge local credentials No Yes Yes
Update Overview Properties Local Credentials
View Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Update Edge
Read Customer Keys Grants ability to view and manage enterprise security keys such as Edge administrator credentials and IPSEC keys Yes Yes Yes
Update Customer Keys
License Read License Grants ability to view and manage Edge licensing Yes Yes Yes
Update License
Profile Create Edge Overview Profile Controls visibility and control of Edges assigned profile on the Edge overview page No Yes Yes
Read Edge Overview Profile No No
Update Edge Overview Profile Yes Yes
Delete Edge Overview Profile
Assign Edge Profile Grants ability to assign profiles to Edges No Yes Yes
RMA Reactivation Create Edge Grants ability to view and manage Edge objects and their properties in general Yes Yes Yes
Device
Authentication Settings Create Edge Device Authentication Settings Controls ability to view or change Edge Device Authentication Settings No Yes Yes
Read Edge Device Authentication Settings
Update Edge Device Authentication Settings
Delete Edge Device Authentication Settings
DNS Settings Update Edge Device DNS Settings Controls ability to view or change Edge Device DNS Settings No Yes Yes
Netflow Settings Create Edge Device Netflow Settings Controls ability to view or change Edge Device Netflow Settings No Yes Yes
Read Edge Device Netflow Settings
Update Edge Device Netflow Settings
Delete Edge Device Netflow Settings
LAN-Side NAT Rules Update Edge Device LAN-Side NAT Rules Controls ability to view or change Edge Device LAN-Side NAT Rules No Yes Yes
Voice Quality Monitoring Settings Read Edge Device VQM Settings Controls ability to view or change Edge Device VQM Settings No Yes Yes
Update Edge Device VQM Settings
Syslog Settings Read Edge Device Syslog Settings Controls ability to view or change Edge Device Syslog Settings No Yes Yes
Update Edge Device Syslog Settings
Static Route Settings Update Edge Device Static Route Settings Controls ability to view or change Edge Device Static Route Settings No Yes Yes
ICMP Probes Read Edge Device ICMP Probes Controls ability to view or change Edge Device ICMP Probes No Yes Yes
Update Edge Device ICMP Probes
ICMP Responders Read Edge Device ICMP Responders Controls ability to view or change Edge Device ICMP Responders No Yes Yes
Update Edge Device ICMP Responders
VRRP Settings Update Edge Device VRRP Settings Controls ability to view or change Edge Device VRRP Settings No Yes Yes
Cloud VPN Read Edge Device Cloud VPN Controls ability to view or change Edge Device Cloud VPN No Yes Yes
Update Edge Device Cloud VPN
BFD Rules Update Edge Device BFD Rules Controls ability to view or change Edge Device BFD Rules No Yes Yes
BGP Settings Read Edge Device BGP Settings Controls ability to view or change Edge Device BGP Settings No Yes Yes
Update Edge Device BGP Settings
Multicast Settings Read Edge Device Multicast Settings Controls ability to view or change Edge Device Multicast Settings No Yes Yes
Update Edge Device Multicast Settings
Cloud Security Service Read Edge Device Cloud Security Service Controls ability to view or change Edge Device Cloud Security Service No Yes Yes
Update Edge Device Cloud Security Service
Gateway Handoff Assignment Update Edge Device Gateway Handoff Assignment Controls ability to view or change Edge Device Gateway Handoff Assignment No Yes Yes
High Availability Create Edge Device High Availability Controls ability to view or change Edge Device High Availability No Yes Yes
Read Edge Device High Availability
Update Edge Device High Availability
Delete Edge Device High Availability
Enable HA Standby Pair Grants ability to configure standby HA No Yes Yes
Enable HA Cluster Grants ability to configure HA Clustering No Yes Yes
Enable HA VRRP Pair Grants ability to configure VRRP HA No Yes Yes
Configure VLAN Read Edge Device Settings Controls ability to view or change Edge Device Settings No Yes Yes
Management IP Read Edge Device Management IP Controls ability to view or change Edge Device Management IP No Yes Yes
Update Edge Device Management IP
Device Settings Create Edge Device Settings Controls ability to view or change Edge Device Settings No Yes Yes
Read Edge Device Settings
Update Edge Device Settings
Delete Edge Device Settings
Interface Settings Update Edge Device Interface Settings Controls ability to view or change Edge Device Interface Settings No Yes Yes
WAN Settings Update Edge Device WAN Settings Controls ability to view or change Edge Device WAN Settings No Yes Yes
Security VNF Update Edge Device Security VNF Controls ability to view or change Edge Device Security VNF No Yes Yes
Wi-Fi Radio Settings Create Edge Device Wi-Fi Settings Controls ability to view or change Edge Device Wi-Fi Settings No Yes Yes
Read Edge Device Wi-Fi Settings
Update Edge Device Wi-Fi Settings
Delete Edge Device Wi-Fi Settings
Multi-Source QoS Read Edge Device Cloud VPN QoS Settings Controls ability to view or change Edge Device Cloud VPN QoS Settings No Yes Yes
Update Edge Device Cloud VPN QoS Settings
TACACS Settings Create Network Service Grants ability to view and manage services with the Network Services configuration block Yes Yes Yes
Read Network Service No No
Update Network Service Yes Yes
Delete Network Service
Create Customer Keys Grants ability to view and manage enterprise security keys such as Edge administrator credentials and IPSEC keys Yes Yes Yes
Read Customer Keys
Update Customer Keys
Delete Customer Keys
Manage Customer Keys No No
L2 Settings Update Edge Device L2 Settings Controls ability to view or change Edge Device L2 Settings No Yes Yes
SNMP Settings Create Edge Device SNMP Settings Controls ability to view or change Edge Device SNMP Settings No Yes Yes
Read Edge Device SNMP Settings
Update Edge Device SNMP Settings
Delete Edge Device SNMP Settings
NTP Read Edge Device NTP Settings Controls ability to view or change Edge Device NTP Settings No Yes Yes
Update Edge Device NTP Settings
Visibility Mode Update Edge Device Config Visibility Mode Controls ability to view or change Edge Device Config Visibility Mode No Yes Yes
Analytics Settings Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Update Edge
Business Policy Edge Business Policy Controls ability to view or change Edge business policy page No Yes Yes
SD-WAN Overlay Rate Limit Read Edge Business Policy Rate Limit Controls the ability to read and update the rate limiting business policy feature No Yes Yes
Update Edge Business Policy Rate Limit
SD-WAN Overlay Rate Limit SD-WAN Traffic Class and Weight Mapping Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Read Customer Profile Grants ability to view and edit enterprise configuration profiles Yes Yes Yes
Firewall Edge Firewall Controls ability to view or change Edge firewall page No Yes Yes
Firewall Logging Syslog Forwarding Stateful Firewall Configure Edge Firewall Logging Grants ability to configure Edges level firewall logging No Yes Yes
Firewall Logging View Firewall Logs Grants ability to view collected firewall logs Yes Yes Yes
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Syslog Forwarding View Syslog Forwarding Grants ability to see Syslog forwarding No Yes Yes
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Stateful Firewall Settings Network & Flood Protection Settings Edge Access Create Edge Firewall Edge Access Privilege granting or denying visibility and control of an Edges Stateful Firewall Settings, Network & Flood Protection Settings and Edge Access on the Edge firewall page No Yes Yes
Read Edge Firewall Edge Access
Update Edge Firewall Edge Access
Delete Edge Firewall Edge Access
Events from this Edge Read Customer Event Grants ability to view customer level events Yes No No
Remote Actions Read Remote Actions Privilege granting access to view and execute remote actions No Yes Yes
Remote Actions Generate Diagnostic Bundle Remote Diagnostics Read Diagnostics Controls creation of and access to diagnostics bundles, both Edge and Gateway. Combine with Edge and Gateway privileges to control access to each type individually Yes Yes Yes
Generate Diagnostic Bundle Create Diagnostic Bundle No Yes Yes
Remote Diagnostics Read Remote Diagnostics Grants access to view and execute remote diagnostics No Yes Yes
Configure > Profiles > Select Profile Profile Overview Profile Overview Controls ability to view or change profile overview page No Yes Yes
Description Create Profile Overview Description Controls ability to view or change Profile Overview Description No Yes Yes
Read Profile Overview Description No No
Update Profile Overview Description Yes Yes
Delete Profile Overview Description
Local Credentials Read Overview Properties Local Credentials Grants ability to view and configure Edge local credentials No Yes Yes
Update Overview Properties Local Credentials
Device
Authentication Settings Create Profile Device Authentication Settings Controls ability to view or change Profile Device Authentication Settings No Yes Yes
Read Profile Device Authentication Settings
Update Profile Device Authentication Settings
Delete Profile Device Authentication Settings
DNS Settings Update Profile Device DNS Settings Controls ability to view or change Profile Device DNS Settings No Yes Yes
Netflow Settings Create Profile Device Netflow Settings Controls ability to view or change Profile Device Netflow Settings No Yes Yes
Read Profile Device Netflow Settings
Update Profile Device Netflow Settings
Delete Profile Device Netflow Settings
LAN-Side NAT Rules Update Profile Device LAN-Side NAT Rules Controls ability to view or change Profile Device LAN-Side NAT Rules No Yes Yes
Voice Quality Monitoring Settings Read Profile Device VQM Settings Controls ability to view or change Profile Device VQM Settings No Yes Yes
Update Profile Device VQM Settings
Syslog Settings Read Profile Device Syslog Settings Controls ability to view or change Profile Device Syslog Settings No Yes Yes
Update Profile Device Syslog Settings
Cloud VPN Read Profile Device Cloud VPN Controls ability to view or change Profile Device Cloud VPN No Yes Yes
Update Profile Device Cloud VPN
BFD Rules Update Profile Device BFD Rules Controls ability to view or change Profile Device BFD Rules No Yes Yes
OSPF Areas Read Profile Device OSPF Settings Controls ability to view or change Profile Device OSPF Settings No Yes Yes
Update Profile Device OSPF Settings
BGP Settings Read Profile Device BGP Settings Controls ability to view or change Profile Device BGP Settings No Yes Yes
Update Profile Device BGP Settings
Multicast Settings Read Profile Device Multicast Settings Controls ability to view or change Profile Device Multicast Settings No Yes Yes
Update Profile Device Multicast Settings
Cloud Security Service Read Profile Device Cloud Security Service Controls ability to view or change Profile Device Cloud Security Service No Yes Yes
Update Profile Device Cloud Security Service
Gateway Handoff Assignment Update Profile Device Gateway Handoff Assignment Controls ability to view or change Profile Device Gateway Handoff Assignment No Yes Yes
Configure VLAN Read Profile Device Settings Controls ability to view or change Profile Device Settings No Yes Yes
Management IP Read Profile Device Management IP Controls ability to view or change Profile Device Management IP No Yes Yes
Update Profile Device Management IP
Device Settings Create Profile Device Settings Controls ability to view or change Profile Device Settings No Yes Yes
Read Profile Device Settings
Update Profile Device Settings
Delete Profile Device Settings
Interface Settings Update Profile Device Interface Settings Controls ability to view or change Profile Device Interface Settings No Yes Yes
Wi-Fi Radio Settings Create Profile Device Wi-Fi Settings Controls ability to view or change Profile Device Wi-Fi Settings No Yes Yes
Read Profile Device Wi-Fi Settings
Update Profile Device Wi-Fi Settings
Delete Profile Device Wi-Fi Settings
L2 Settings Update Profile Device L2 Settings Controls ability to view or change Profile Device L2 Settings No Yes Yes
Multi-Source QoS Read Profile Device Cloud VPN QoS Settings Controls ability to view or change Profile Device Cloud VPN QoS Settings No Yes Yes
Update Profile Device Cloud VPN QoS Settings
SNMP Settings Create Profile Device SNMP Settings Controls ability to view or change Profile Device SNMP Settings No Yes Yes
Read Profile Device SNMP Settings
Update Profile Device SNMP Settings
Delete Profile Device SNMP Settings
NTP Read Profile Device NTP Settings Controls ability to view or change Profile Device NTP Settings No Yes Yes
Update Profile Device NTP Settings
Visibility Mode Update Profile Device Config Visibility Mode Controls ability to view or change Profile Device Config Visibility Mode No Yes Yes
Analytics Settings Read Profile Device Analytics Settings Controls ability to view or change Profile Device Analytics Settings No Yes Yes
Update Profile Device Analytics Settings
Create Profile Device Network Settings Controls ability to view or change Profile Device Network Settings No Yes Yes
Read Profile Device Network Settings
Update Profile Device Network Settings
Delete Profile Device Network Settings
Business Policy Profile Business Policy Controls ability to view or change profile business policy page No Yes Yes
SD-WAN Overlay Rate Limit Read Profile Business Policy Rate Limit Controls the ability to read and update the rate limiting business policy feature No Yes Yes
Update Profile Business Policy Rate Limit
Firewall Profile Firewall Controls ability to view or change profile firewall page No Yes Yes
Firewall Logging Syslog Forwarding Stateful Firewall Configure Profile Firewall Logging Grants ability to configure profile level firewall logging No Yes Yes
Firewall Logging View Firewall Logs Grants ability to view collected firewall logs Yes Yes Yes
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Syslog Forwarding View Syslog Forwarding Grants ability to see Syslog forwarding No Yes Yes
Read Edge Grants ability to view and manage Edge objects and their properties in general Yes No No
Stateful Firewall Settings Network & Flood Protection Settings Edge Access Create Edge Firewall Edge Access Controls visibility and control of Stateful Firewall Settings, Network & Flood Protection Settings, and Edge Access on the profile firewall page No Yes Yes
Read Edge Firewall Edge Access No No
Update Edge Firewall Edge Access Yes Yes
Delete Edge Firewall Edge Access
Configure Edges Create Edge Grants ability to view and manage Edge objects and their properties in general Yes Yes Yes
Read Edge No No
Update Edge
Delete Edge Yes Yes
Manage Edge No No
Read Customer Profile Grants ability to view and edit enterprise configuration profiles Yes Yes Yes
New Edge > Authentication Create Customer PKI Grants ability to view and manage enterprise PKI settings Yes No No
Select Edge/Edges > Local Credentials Read Overview Properties Local Credentials Grants ability to view and configure Edge local credentials No Yes Yes
Update Overview Properties Local Credentials
Select Edge/Edges > Assign Profile Assign Edge Profile Grants ability to assign profiles to Edges No Yes Yes
Select Edge/Edges > Update Pre-Notifications Update Edge Overview Properties Enable Alerts Controls ability to view or change Edge alert configuration on the Edge overview page No Yes Yes
Select Edge/Edges > Assign Edge License
Select Edge/Edges > Update Customer Alerts
Edge Cluster Read Edge Cluster Grants ability to view Edge clusters No Yes Yes
Create Cloud Edge Create DMZ Gateway Grants ability to create DMZ Gateways No Yes Yes
Profiles Create Customer Profile Grants ability to view and edit enterprise configuration profiles Yes Yes Yes
Read Customer Profile
Update Customer Profile
Delete Customer Profile
Manage Customer Profile No No
Duplicate Profile Duplicate Customer Profile Grants ability to edit duplicate customer level profiles No Yes Yes
Create Profile Grants access to view and manage profiles at any level No Yes Yes
Read Profile
Update Profile
Delete Profile
Object Groups Create Object Group Grants ability to manage Object Group Yes Yes Yes
Read Object Group
Update Object Group
Delete Object Group
Manage Object Group No No
Read Customer Profile Grants ability to view and edit enterprise configuration profiles Yes Yes Yes
Segments/Networks Create Network Addressing Grants ability to view and manage address block configuration in the legacy Network profile mode Yes Yes Yes
Read Network Addressing No No
Update Network Addressing Yes Yes
Delete Network Addressing
Manage Network Addressing No No
Create Customer Segment Grants ability to view and manage the creation of segments and their assignment to configuration profiles No Yes Yes
Read Customer Segment
Update Customer Segment
Delete Customer Segment
Overlay Flow Control Create Overlay Flow Control Grants ability to view and manage data and configuration presented on the Overlay Flow Control page No Yes Yes
Read Overlay Flow Control
Update Overlay Flow Control
Delete Overlay Flow Control
Read Customer Profile Grants ability to view and edit enterprise configuration profiles Yes Yes Yes
Update Customer Profile
Network Services Create Network Service Grants ability to view and manage services with the Network Services configuration block Yes Yes Yes
Read Network Service No No
Update Network Service Yes Yes
Delete Network Service
Manage Network Service No No
Create Customer Keys Grants ability to view and manage enterprise security keys such as Edge administrator credentials and IPSEC keys Yes Yes Yes
Read Customer Keys
Update Customer Keys
Read Customer Profile Grants ability to view and edit enterprise configuration profiles Yes Yes Yes
Edge Cluster Create Edge Cluster Controls the ability to create and configure Edge Clusters No Yes Yes
Read Edge Cluster
Update Edge Cluster
Delete Edge Cluster
Cloud VPN Hubs Create VPN Hub Network Service Grants ability to manage VPN Hubs as Network Services No Yes Yes
Read VPN Hub Network Service
Update VPN Hub Network Service
Delete VPN Hub Network Service
Non SD-WAN Destinations via Gateway Non SD-WAN Destinations via Edge Create Non SD-WAN Destination via Gateway Grants ability to view and manage Non SD-WAN Destinations via Gateway and Non SD-WAN Destinations via Edge No Yes Yes
Read Non SD-WAN Destination via Gateway
Update Non SD-WAN Destination via Gateway
Delete Non SD-WAN Destination via Gateway
Cloud Security Service Create Cloud Security Service Controls creation and configuration of third party cloud security services to which the traffic can be steered by business policy No Yes Yes
Read Cloud Security Service
Update Cloud Security Service
Delete Cloud Security Service
VNFs Create VNF Network Service Grants ability to manage VNF Network Services No Yes Yes
Read VNF Network Service
Update VNF Network Service
Delete VNF Network Service
VNF Licenses Create VNF License Network Service Grants ability to manage VNF licenses with Network Services No Yes Yes
Read VNF License Network Service
Update VNF License Network Service
Delete VNF License Network Service
DNS Services Create DNS Network Service Controls the ability to create and configure DNS services for use in profiles No Yes Yes
Read DNS Network Service
Update DNS Network Service
Delete DNS Network Service
Private Network Names Create Private Network Name Network Service Grants ability to manage Private Network Name with Network Services No Yes Yes
Read Private Network Name Network Service
Update Private Network Name Network Service
Delete Private Network Name Network Service
Authentication Services Create Authentication Service Controls the creation and configuration of hosted 802.1x service providing LAN-side user authentication No Yes Yes
Read Authentication Service
Update Authentication Service
Delete Authentication Service
TACACS Services Create Network Service Grants ability to view and manage services with the Network Services configuration block Yes Yes Yes
Read Network Service No No
Update Network Service Yes Yes
Delete Network Service
Create Customer Keys Grants ability to view and manage enterprise security keys such as Edge administrator credentials and IPSEC keys Yes Yes Yes
Read Customer Keys
Update Customer Keys
Delete Customer Keys
Manage Customer Keys No No
Cloud Subscriptions Create Cloud Subscription Service Grants ability to view and manage the configuration of access to IAAS providers, such as Azure, AWS and Google Cloud No Yes Yes
Read Cloud Subscription Service
Update Cloud Subscription Service
Delete Cloud Subscription Service
Alerts & Notifications Read Customer Alert Notification Grants ability to view and manage customer alert configuration No Yes Yes
Create Customer Alert Grants ability to view and manage customer alert configuration and generated alerts Yes No No
Read Customer Alert Yes Yes
Update Customer Alert
Delete Customer Alert No No
Manage Customer Alert
SMS Alert Update Customer SMS Alert Grants ability to configure SMS alerts at the customer level No Yes Yes
Customer Update Enterprise Grants ability to view and manage Customers, from the Partner or Operator level Yes Yes Yes
Other Settings Read User Agreement Privilege granting access to configure the customer user agreement feature Yes No No
Update User Agreement
Test & Troubleshoot Read Diagnostics Controls creation of and access to diagnostics bundles, both Edge and Gateway. Combine with Edge and Gateway privileges to control access to each type individually Yes Yes Yes
Remote Diagnostics Create Remote Diagnostics Grants access to view and execute remote diagnostics No No No
Read Remote Diagnostics Yes Yes
Update Remote Diagnostics No No
Delete Remote Diagnostics
Manage Remote Diagnostics Yes Yes
Gateway Remote Cloud Traffic Routing No Yes Yes
Reset USB Modem Remote Reset USB Modem Grants ability to execute the Edge USB modem reset remote action No Yes Yes
Scan for nearby Wi-Fi Remote Scan for Wi-Fi Access Points Grants ability to execute the Edge Wi-Fi scan remote action No Yes Yes
VPN Test Remote VPN Test Grants ability to execute the Edge VPN test remote action No Yes Yes
Remote Actions Create Remote Actions Grants access to view and execute remote actions No Yes Yes
Read Remote Actions
Update Remote Actions
Delete Remote Actions
Select Edge > Shutdown button Shutdown Edge Grants ability to execute the Edge shutdown remote action No Yes Yes
Select Edge > Deactivate button Deactivate Edge Grants ability to execute the deactivate Edge remote action No Yes Yes
Diagnostic Bundles/Packet Capture Create Diagnostics Controls creation of and access to diagnostics bundles, both Edge and Gateway. Combine with Edge and Gateway privileges to control access to each type individually Yes Yes Yes
Read Diagnostics
Update Diagnostics
Delete Diagnostics
Manage Diagnostics No No
Request Diagnostic Bundle Create Diagnostic Bundle Grants ability to view and request Diagnostic bundles as part of remote diagnostics functionality No Yes Yes
Diagnostic Bundles/Packet Capture

404 resource not found page *

 Read Diagnostic Bundle
Update Diagnostic Bundle
Delete Diagnostic Bundle Delete Diagnostic Bundle
Request PCAP Bundle Create PCAP Bundle Grants ability to view and request PCAP bundles as part of remote diagnostics functionality No Yes Yes
Diagnostic Bundles/Packet Capture 404 resource not found page * Read PCAP Bundle
Update PCAP Bundle No No
Delete PCAP Bundle Yes Yes
Diagnostic Bundles/Packet Capture 404 resource not found page * Manage PCAP Bundle
Download Diagnostic Bundle Download Edge Diagnostics Grants ability to download Edge Diagnostics No Yes Yes
Administration
System Settings Read Customer Delegation Grants ability to view and manage the delegation of privileges from the customer to Partners or the Operator Yes Yes Yes
General Information > General Information Read Customer General Information Controls visibility and control of Customer General Information on the System Settings General Information page No Yes Yes
Update Customer General Information
Default Edge Authentication Read Customer PKI Grants ability to view and manage enterprise PKI settings Yes No No
Update Customer PKI
Edge Configuration Read Customer Edge Settings Controls visibility and control of Customer Edge Settings on the System Settings General Information page No Yes Yes
Update Customer Edge Settings
Privacy Settings Read Customer Privacy Settings Controls visibility and control of Customer Privacy Settings on the System Settings General Information page No Yes Yes
Update Customer Privacy Settings
Privacy Settings > Enforce PCI Update Customer User Grants ability to view and manage Customer administrators Yes Yes Yes
Contact Information Read System Settings Contact Info Controls visibility and control of System Settings Contact Info on the System Settings General Information page No Yes Yes
Update System Settings Contact Info
Authentication Create Customer Authentication Grants ability to view and manage customer authentication mode, for example SSO, Radius or Native Yes Yes Yes
Read Customer Authentication
Update Customer Authentication
Delete Customer Authentication
Manage Customer Authentication
API Tokens Read Customer Token Grants ability to view and manage authentication tokens at the Customer level Yes No No
Update Customer Token
Administrators Create Customer User Grants ability to view and manage Customer administrators Yes Yes Yes
Read Customer User
Update Customer User
Delete Customer User
Manage Customer User No No
Select Enterprise User > API Tokens Create Customer Token Grants ability to view and manage authentication tokens at the Customer level Yes No No
Read Customer Token
Update Customer Token
Delete Customer Token
Manage Customer Token
Role Customization Create Role Customization Package Grants access to manage role customization packages Yes No No
Read Role Customization Package
Update Role Customization Package
Delete Role Customization Package
Manage Role Customization Package
Edge Licensing Create License Grants ability to view and manage Edge licensing Yes No No
Read License Yes Yes
Update License
Delete License No No
Manage License
VeloCloud Support Access Role Create Customer Delegation Grants ability to view and manage the delegation of privileges from the customer to Partners or the Operator Yes Yes Yes
Read Customer Delegation
Update Customer Delegation
Delete Customer Delegation
Manage Customer Delegation No No

* – When the corresponding user role privilege is denied, the Orchestrator window displays the 404 resource not found error.