[Notice of UI Terminology Change]
With recent updates, the term "Member" on the screens is gradually being changed to "User." If you still see "Member" in some parts of this help documentation, please read it as "User." For more details on this change, please check this announcement.
With recent updates, the term "Member" on the screens is gradually being changed to "User." If you still see "Member" in some parts of this help documentation, please read it as "User." For more details on this change, please check this announcement.
This page explains how to configure permission settings for users (IT Admins) who can log into Josys.
Overview
Users who can log into Josys are referred to as "IT Admins."
This refers to users who, in addition to logging into Josys, can perform operations on Josys (such as provisioning app accounts and assigning devices).
This page explains how to register new users who can log into Josys and how to configure their permissions.
Target Audience
IT Admins with Super Admin privileges
Admin Roles
Josys provides the following two types of admin roles.
| Role | Description |
|---|---|
| Super Admin | An administrator who can use all features of Josys. |
| Admin | An administrator with limited permissions configured (by a Super Admin). They do not have the permission to invite other Admins. |
Permissions Grantable to "Admin"
Permissions Configurable for User Profiles
For the "Admin" role, permissions regarding users, apps, and IT devices can be controlled from the options below.
| Type | Description |
|---|---|
| No Access | No permission is granted to access user-related information. |
| User Admin | Permission is granted to edit, register, and delete all users. |
| User Admin (No CSV Download) |
Same as above (except CSV download is not allowed). |
| User Viewer | Permission is granted to view all users. |
Permissions Configurable for Apps
Target App |
Type | Description |
|---|---|---|
| Integratable Apps | No Access | No permission to access information regarding integratable apps. |
| Integratable Apps | Integratable App Admin | Permission to integrate all integratable apps, provision/delete accounts, and view information. |
| Integratable Apps | Partial Integratable App Admin | Permission to integrate selected integratable apps, provision/delete accounts, and view information. Since a list of integrated apps will be displayed, please select the target apps. |
| Integratable Apps | Integratable App Viewer | Permission to view information for all integratable apps. Changing the "Status" in "Discovered Apps" is not allowed. |
| Integratable Apps | Partial Integratable App Viewer | Permission to view information for selected integratable apps. Since a list of integrated apps will be displayed, please select the target apps. |
| Custom Apps | No Access | No permission to access information regarding custom apps. |
| Custom Apps | Custom App Admin | Permission to view information and perform operations for all custom apps. |
| Custom Apps | Custom App Viewer | Permission to view information for all custom apps. Changing the "Status" in "Discovered Apps" is not allowed. |
⚠️ Permission settings for Apps can be configured for each "App Type."
If you have integrated two instances of the same app, you cannot configure separate permissions for each instance at this time.
If you have integrated two instances of the same app, you cannot configure separate permissions for each instance at this time.
⚠️ Users other than "App Admin" cannot change the status of discovered apps.
Permissions Configurable for Devices
| Type | Description |
|---|---|
| No Access | No permission to access information regarding IT devices. |
| IT Device Admin | Permission to edit, register, delete, and assign (or unassign) all devices. |
| IT Device Admin (No CSV Download) |
Same as above (except CSV download is not allowed). |
| IT Device Viewer | Permission to view all devices. |
⚠️ You cannot restrict permissions by device categories, such as device types.
Customizing User Permissions
To grant IT Admin permissions to a new user: Please refer to Granting IT Admin Permissions to a User.
To change settings for an existing user with IT Admin permissions: Please refer to Changing IT Admin Permissions.
To delete an existing user with IT Admin permissions: Please refer to Deleting an IT Admin.
💡 Changing permissions of existing users can only be performed by users with Super Admin privileges.
Frequently Asked Questions
Q: What happens if I set "No Access" for an Admin permission?
A: The corresponding menu will no longer be accessible, and it will also disappear from the sidebar. However, related pages will still be visible.
Example) If an admin who only has App permissions logs into Josys, User Profiles and Devices will not be displayed in the menu. However, they can still view users within the app's user list.
Q: Which setting items are only visible to users with Super Admin privileges?
A: The following items are not displayed to administrators other than those with Super Admin privileges.- Scorecard
- Access Requests
- Access Policies
- Workflows
- Alert Settings
- Audit Logs
- Integrations > Browser Extension
- Integrations > Integrate Workspace Tools
- Employee Portal
- IT Device Actions
- IP Whitelisting
- SSO (SAML Authentication)
Q: We have integrated two or more instances of the same app. Can we set permissions for each app individually?
A: Currently, you cannot configure separate permissions for each instance.
Q: Can we restrict permissions by device type?
A: You cannot configure permission settings by device categories.