Composite roles are a group of functional roles combined from different functional categories.
By default, the following composite roles are available:
| Composite Role | SD-WAN Functional Role | Cloud Web Security Functional Role | Secure Access Functional Role | Global Settings Functional Role |
|---|---|---|---|---|
| Customer Standard Admin | SD-WAN Enterprise Admin | Cloud Web Security Enterprise Admin | Secure Access Enterprise Admin | Global Settings Enterprise Admin |
| Customer Superuser | SD-WAN Enterprise Superuser | Cloud Web Security Enterprise Superuser | Secure Access Enterprise Superuser | Global Settings Enterprise Superuser |
| Customer Support | SD-WAN Enterprise Support | Cloud Web Security Enterprise Read Only | Secure Access Enterprise Read Only | Global Settings Enterprise Support |
| Customer Read Only User | SD-WAN Enterprise Read Only | No privileges | No privileges | Global Settings Enterprise Read Only |
| Customer Security Admin | SD-WAN Security Enterprise Admin | Cloud Web Security Enterprise Admin | Secure Access Enterprise Admin | Global Settings Enterprise Admin |
| Customer Security Read Only | SD-WAN Security Enterprise Read Only | Cloud Web Security Enterprise Read Only | Secure Access Enterprise Read Only | Global Settings Enterprise Read Only |
| Customer Network Admin | SD-WAN Enterprise Admin | Cloud Web Security Enterprise Read Only | Secure Access Enterprise Read Only | Global Settings Enterprise Admin |
You can assign the above roles to a user, while creating a new Enterprise user. See Create New Admin User.
You can also map the composite role while configuring Single Sign on. See Configure Single Sign On for Enterprise User.
To view the existing composite roles along with the description, see Manage Composite Roles.
To create a custom composite role, see Create New Composite Roles.
You can also customize the role privileges of the functional roles. For more information, see Role Customization.
