List of User Privileges

This section lists all the role privileges available in the Partner portal of the SASE Orchestrator.

The columns in the table indicate the following:

• Allow Privilege – Do the privileges have allow access?
• Deny Privilege – Do the privileges have deny access?
• Customizable – Is the privilege available for customization in the Service Permissions tab?

Feature	Name of the Privilege	Description	Allow Privilege	Deny Privilege	Customizable
Manage Customers	Create Customer	Grants ability to view and manage Customers, from the Partner or Operator level	Yes	No	No
	Read Customer
	Update Customer			Yes	Yes
	Delete Customer			No	No
	Manage Customer
Partner Events	Create Partner Event	Grants access to view Partner events	Yes	No	No
	Read Partner Event			Yes	Yes
	Update Partner Event			No	No
	Delete Partner Event
	Manage Partner Event
Partner Admins	Create Partner User	Grants access to view and configure Partner administrators	Yes	No	No
	Read Partner User			Yes	Yes
	Update Partner User			No	No
	Delete Partner User
	Manage Partner User
Partner Admins > API Tokens	Create Partner Token	Grants ability to view and manage operator authentication tokens	Yes	No	No
	Read Partner Token
	Update Partner Token
	Delete Partner Token
	Manage Partner Token
Service Permissions	Create Service Permissions Package	Grants access to manage Service Permissions packages	Yes	No	No
	Read Service Permissions Package
	Update Service Permissions Package
	Delete Service Permissions Package
	Manage Service Permissions Package
Partner Overview	Update Partner	Grants access to view and Partners	Yes	No	No
Partner Overview > Other Settings	Read User Agreement	Grants access to configure the customer user agreement feature	Yes	No	No
	Update User Agreement
Partner Settings	Read Partner Delegation	Grants ability to view and edit the delegation of Partner privileges to the Operator	Yes	No	No
Partner Settings > General Information > Privacy Settings	Read Customer Delegation	Grants ability to view and manage the delegation of privileges from the customer to Partners or the Operator	Yes	Yes	Yes
	Update Customer Delegation				No
Partner Settings > Authentication	Create Partner Authentication	Grants ability to view and edit Partner authentication mode and associated configuration	Yes	No	No
	Read Partner Authentication
	Update Partner Authentication
	Delete Partner Authentication
	Manage Partner Authentication
Partner Settings > Authentication > API Tokens	Create Partner Token	Grants ability to view and manage operator authentication tokens	Yes	No	No
	Read Partner Token
	Update Partner Token
	Delete Partner Token
	Manage Partner Token
Edge Licensing	Create License	Grants ability to view and manage Edge licensing	Yes	No	No
	Read License			Yes	Yes
	Update License
	Delete License			No	No
	Manage License
Gateway Pools Gateways Gateway Diagnostic bundles	Create Gateway	Grants ability to view and manage Gateways, from the Partner or Operator level	Yes	Yes	Yes
	Read Gateway
	Update Gateway
	Delete Gateway
	Manage Gateway
	View Tab Gateway List	Grants ability to view the Gateway list tab	No	Yes	Yes
Gateway Diagnostic Bundles > Download Diagnostic Bundles	Download Gateway Diagnostics	Grants ability to download Gateway Diagnostics	No	Yes	Yes
VeloCloud Support Access Role	Create Partner Delegation	Grants ability to view and edit the delegation of Partner privileges to the Operator	Yes	No	No
	Read Partner Delegation
	Update Partner Delegation
	Delete Partner Delegation
	Manage Partner Delegation

When the corresponding user privilege is denied, the Orchestrator window displays the 404 resource not found error.