Console Roles

The Janrain Console currently employs the following roles:

  • Application Administrator
  • Console Access Manager
  • Console Access Viewer
  • Customer Care Portal Agent
  • Customer Care Portal Agent Manager
  • Customer Care Portal Editor
  • Customer Care Portal Agent Viewer
  • Application Configuration Admin
  • Application Configuration Manager
  • Application Configuration Viewer
  • User Profile Admin
  • User Profile Manager
  • User Profile Viewer
  • Property Manager

Before putting together your agent infrastructure, you should have a clear understanding of the permissions granted to each of these roles. In addition, you might want to familiarize yourself with the following two topics:

Here’s a brief overview of the Console roles and the permissions granted to each one.


Application Administrator

Application Administrators have full control over everything that can be done in the Janrain Console, and have access to all the pages within the Console. Administrators have access to all user profile management activities, can make application configuration changes, and are allowed to manage application permissions for other Console users.

Note. However, there is one thing that an Administrator cannot do: Administrators cannot modify their own role or their own set of permissions. That prevents you from inadvertently losing permissions or locking yourself out of the Console.

Administrators have the following Console permissions:

  • View full user records
  • View the analytics page
  • Edit the analytics page
  • View the schema
  • Edit the schema
  • Edit user records
  • View API clients
  • Edit clients
  • View settings
  • Edit settings
  • View people’s abilities
  • Edit people’s abilities
  • Send invites
  • Search for Console users with access to this application
  • View Console users with access to this application
  • Read audit logs for a specific profile
  • Search for profiles
  • View profiles in Customer Care Portal
  • Update profiles in Customer Care Portal
  • Create profiles in Customer Care Portal
  • Delete profiles in Customer Care Portal
  • Invite Console users to access this application
  • Remove Console users’ access to this application
  • Update Console users’ access to this application
  • Create full user records
  • Update full user records
  • Delete full user records
  • Create Console user groups
  • Delete Console user groups
  • Update Console user groups
  • Search for Console user groups
  • View Console user groups
  • Create API clients
  • Delete API clients
  • View API client secrets
  • Reset API client secrets
  • Update API client permissions
  • View API client settings
  • Update API client settings
  • View global settings
  • Update global settings
  • View profile counts
  • Grant Customer Care Portal agent roles to Console users
  • Grant all roles to Console users

Console Access Manager

Console Access Managers have the ability to manage application permissions for other Console users; this includes inviting new users, updating access levels, and even removing access permissions for a user. However, this role does not have access to user profile data and cannot make any configuration changes: Console Access Managers can only access the Manage Agents section.

Access Managers have the following Console permissions:

  • Search for Console users with access to this application
  • View Console users with access to this application
  • Invite Console users to access this application
  • Remove Console users’ access to this application
  • Update Console users’ access to this application
  • Search for Console user groups
  • View Console user groups
  • Grant Customer Care Portal agent roles to Console users
  • Grant all roles to Console users

Console Access Viewer

Console Access Viewers have the ability to view the application permissions assigned to other Console users, but they cannot manage permissions or access to Console. This role does not have access to user profile data and cannot make configuration changes: Console Access Managers can only access the Manage Agents section.

Console Access Viewers have the following Console permissions:

  • Search for Console users with access to this application
  • View Console users with access to this application
  • View Console user groups
  • Search for Console user groups

Customer Care Portal Agent

This role is available only if an application has the Customer Care Portal feature enabled. If Customer Care Portal is enabled then, using the customized profile management forms on the Create User Profiles and Edit User Profile pages, Customer Care Portal Agents can create and delete profiles, update existing profiles, and send password reset and verification emails. This role only has access to the Manage Profiles section, and access to specific profiles may be restricted further based on entity type and profile attribute. A Customer Care Portal Agent does not have access to the Full Record pages that expose all the attributes of a user profile, nor do they have access to application configuration pages. In addition, Customer Care Portal Agents cannot view application permissions for other Console users.

Portal Agents have the following Console permissions:

  • Read audit logs for a specific profile
  • Search for profiles
  • View profiles in the Customer Care Portal
  • Update profiles in the Customer Care Portal
  • Create profiles in the Customer Care Portal
  • Delete profiles in the Customer Care Portal
  • View profile counts

Customer Care Portal Agent Manager

This role is available only if an application has the Customer Care Portal feature enabled. If Customer Care Portal is enabled then, using the customized profile management forms on the Create User Profiles and Edit User Profile pages, Customer Care Portal Agent Managers can create and delete profiles, update existing profiles, and send password reset and verification emails. Agent Managers also have the ability to manage Customer Care Portal permissions for other Console users; this includes inviting new users, updating access levels, and removing access entirely. In addition, Agent Managers can view, but not manage, users with non-Customer Care Portal roles. Users holding this role have access to the Manage Agents and Manage Profiles sections, but do not have access to the Full Record pages that expose all the user profile attributes, and cannot make any application configuration changes.

Customer Care Portal Agent Managers have the following Console permissions:

  • Search for Console users with access to this application
  • View Console users with access to this application
  • Read audit logs for a specific profile
  • Search for profiles
  • View profiles in Customer Care Portal
  • Update profiles in Customer Care Portal
  • Create profiles in Customer Care Portal
  • Delete profiles in Customer Care Portal
  • Invite Console users to access this application
  • Remove Console users’ access to this application
  • Update Console users’ access to this application
  • Create Console user groups
  • Delete Console user groups
  • Search for Console user groups
  • View Console user groups
  • Update Console user groups
  • View profile counts
  • Grant all roles to Console users

Customer Care Portal Editor

This role is available only if an application has the Customer Care Portal feature enabled. If Customer Care Portal is enabled then, using the customized profile management forms on the Create User Profiles and Edit User Profile pages, Customer Care Portal Editors can update existing profiles and send password reset and verification emails. This role only has access to the Manage Profiles section, and access to specific profiles may be restricted further based on entity type and profile attribute. Portal Editors do not have access to the Full Record pages that expose all the user profile attributes, and cannot access the Create User Profile page. Portal Editors cannot make any application configuration modifications, and they cannot view application permissions for other Console users.

Customer Care Portal Editors have the following Console permissions:

  • Read audit logs for a specific profile
  • Search for profiles
  • View profiles in Customer Care Portal
  • Update profiles in Customer Care Portal
  • View profile counts

Customer Care Portal Agent Viewer

This role is available only if an application has the Customer Care Portal feature enabled. If Customer Care Portal isenabled then, using the customized profile management forms on the Create User Profiles and Edit User Profile pages, Customer Care Portal Agent Viewers can view existing profiles. This role only has access to the Manage Profiles section, and access to specific profiles may be further restricted based on entity type and profile attribute. Agent Viewers do not have access to the Full Record pages that expose all the user profile attributes, to the Create User Profile page, or to any application configuration pages. In addition, Agent Viewers cannot view application permissions for other Console users.

Customer Care Portal Agent Viewers have the following Console permissions:

  • Read audit logs for a specific profile
  • Search for profiles
  • View profiles in Customer Care Portal
  • View profile counts

User Profile Admin

User Profile Admins can create, modify, and delete user records using the Full Record pages in the Manage Profilessection. This role only has access to the Manage Profiles section, and access to specific profiles may be further restrictedbased on entity type and profile attribute. User Profile Admins do not have access to application configurations and cannot view application permissions for other Console users.

User Profile Admins have the following Console permissions:

  • View full user records
  • View the schema
  • Read audit logs for a specific profile
  • Search for profiles
  • Create full user records
  • Update full user records
  • Delete full user records
  • View profiles in Customer Care Portal

User Profile Manager

User Profile Managers can modify existing user records using the Full Record pages in the Manage Profiles section. This role only has access to the Manage Profiles section, and access to specific profiles may be further restricted based on entity type and profile attribute. User Profile Managers do not have access to any application configurations and cannot view application permissions for other Console users.

User Profile Managers have the following Console permissions:

  • View full user records
  • View the schema
  • Read audit logs for a specific profile
  • Search for profiles
  • Update full user records
  • View profiles in Customer Care Portal

User Profile Viewer

User Profile Viewers can view existing user records using the Full Record pages in the Manage Profiles section. This role only has access to the Manage Profiles section, and access to specific profiles may be further restricted based on entity type and profile attribute. The User Profile Viewer role does not have access to application configurations and cannot view application permissions for other Console users.

User Profile Viewers have the following Console permissions:

  • View full user records
  • View the schema
  • Read audit logs for a specific profile
  • Search for profiles
  • View profiles in Customer Care Portal

Application Configuration Admin

Application Configuration Admins have full control over application configuration changes; this includes creating and deleting properties and accessing client secrets. This role does not have access to user profile data and cannot view application permissions for other Console users. Application Configuration Admins have access to the Mange Applications, Manage Properties, and Manage Schemas sections.

Application Configuration Admins have the following Console permissions:

  • View the schema
  • View API clients
  • Create API clients
  • Delete API clients
  • View API client secrets
  • Reset API client secrets
  • Update API client permissions
  • View API client settings
  • Update API client settings
  • View global settings
  • Update global settings
  • View profile counts

Application Configuration Manager

Application Configuration Managers can manage changes to existing application configurations, including global settings, property permissions and settings, and schemas. This role cannot create or delete properties, access client secrets, access user profile data, or view application permissions for other Console users. Configuration Managers have access to the Mange Applications, Manage Properties, and Manage Schemas sections.

Application Configuration Managers have the following Console permissions:

  • View the schema
  • View API clients
  • Update API client permissions
  • View API client settings
  • Update API client settings
  • View global settings
  • Update global settings
  • View profile counts

Application Configuration Viewer

Application Configuration Viewers have read-only access to application configurations. Role-holders cannot make any configuration changes, access user profile data, or view application permissions for other Console users. Role-holders have access to the Mange Applications, Manage Properties, and Manage Schemas sections.

Application Configuration Viewers have the following Console permissions:

  • View the schema
  • View API clients
  • View API client settings
  • View global settings
  • View profile counts

Property Manager

Property Managers have the ability to manage property settings and have read-only access to schemas and global settings. This role cannot access user profile data or view application permissions for other Console users. Property Managers have access to the Mange Applications, Manage Properties, and Manage Schemas sections.

Property Managers have the following Console permissions:

  • View the schema
  • View API clients
  • View API client settings
  • Update API client settings
  • View global settings
  • View profile counts