Manage roles in the Admin Center

Roles determine the permission level for users in the Opti ID Admin Center and Optimizely products. System roles for each product are in the Admin Center by default. You can add custom roles to support individuals who manage multiple product instances with the same entitlements.

There are levels of administrators in the Opti ID Admin Center. You are presented with the most relevant page as your starting point based on your Opti ID Admin Center role. Each administrator level can invite users at the product, instance, and project levels (for Optimizely Experimentation).

Think of these as product roles, where the product is Opti ID Admin Center. They determine what you can do within the Opti ID Admin Center and do not apply to your other Optimizely products.

In addition to roles that are specific to the Opti ID Admin Center, there are roles for each of your Optimizely products in the Opti ID Admin Center. The product roles determine what your users can do in the corresponding Optimizely product.

View role details

The Roles page displays the system and custom roles for all of your Optimizely products (see the Type column).

1. Go to Roles in the Opti ID Admin Center. 
2. (Optional) Use the Product and Instance filters to find roles for a specific product and instance.

3. Select a role to view more details.

   

Create a custom role

If the available system roles do not provide the specific access you want to grant to users, you can create a custom role.

You can also manage CMP teams in Opti ID using a custom role. See Manage teams in Opti ID in the CMP user documentation.

1. Go to Roles in the Opti ID Admin Center.
2. Click Add Role.
3. Enter the Role Name in the following format: <Product>-<Instance Name>-<Role Name>. For example, CMP-Production1-Support.
4. (Optional) Enter a Description.
5. Select a product and instance to associate the role with.
6. Select one of the following options in the Duplicate Role section:
   • No – Create the role from scratch.
   • Yes – Duplicate an existing role and modify it as needed. You must select the role that you want to duplicate.

7. Select the attributes for this role in the Select Attributes section. This lets you specify the permissions for the role.

   • Not available for CMS (SaaS) or CMS 12. See Custom roles for CMS.
   • See Custom roles for Optimizely Opal for an explanation of available attributes.

8. Click Save.

   

Custom roles for CMS

After you create a custom role for CMS (SaaS) or CMS 12 in Opti ID and assign it to a user or group, it syncs to CMS when a user with the role logs into CMS. At that point, you must set access rights for the custom role in CMS. See Access rights for CMS (SaaS) or Access rights for CMS 12.

Custom roles for Configured Commerce

Creating custom roles with Optimizely Configured Commerce and Opti ID involves a few steps to ensure proper permissions and access. Custom roles created in Configured Commerce do not automatically sync with the Admin Center, and vice-versa. You must create and manage them in both systems independently.

1. Create a custom role in the Admin Console starting with ISC_ or CMS_.
2. Set permissions for the custom role in the Application Dictionary.
3. Create the same custom role in the Admin Center.
4. Assign the role to a user in the Admin Center.
5. Log in with that user to the Admin Console. The user gets permissions from the created role, which you can see in account details.

Custom roles for Optimizely Opal

The following is an explanation of each attribute available:

Chat

See Optimizely Opal Chat.

• Prompt Opal and run installed agents via chat – Prompt and run out-of-the-box agents, specialized agents, and workflow agents in Opal Chat.

Instructions

See Instructions overview.

• View instructions – View instructions (read-only access to Instructions section).
• Add and edit instructions – Add and edit instructions in the Instructions section.

Agents

See Agent overview, Specialized agents overview, and Workflow agents overview.

• View your agents and run logs – View the Your Agents tab and agent configuration pages (read-only). See your own agent run log and available agents list, including workflow agents. 
• View Agent Directory – Access Agent Directory to discover available agents across the organization.
• Add, edit, and install specialized agents – Add, edit, delete specialized agents in the Your Agents tab, and install agents from Agent Directory.
• Add and edit workflow agents – Add, edit, and delete workflow agents with message triggers.
• Add and edit autonomous triggers in workflow agents – Add, update, and delete non-chat triggers (scheduled, event-based, and so on) in the Workflow Builder.

Tools

See Tools overview and Connector tools overview.

• View tools – View available tools and integrations (read-only access to the Tools section).
• Manage OCP-hosted tools – Enable and disable, sync, delete, and add Optimizely Platform (OCP) tool registries.
• Manage custom tools – Enable and disable, delete, and add external (non-OCP) tool registries.

Settings

See Opal settings.

• Manage chat configuration – Change inference level and enable and disable RAG in chat.
• Manage Optimizely product connections – Add and edit Optimizely product connections (OAuth providers) in Settings.
• Manage email domain configuration – Change email domain configuration in Settings.
• Manage RAG configuration – Configure external retrieval-augmented generation RAG (knowledge base) settings, controls the RAG icon visibility.

Delete a role

To delete a custom role:

1. Go to Roles in the Opti ID Admin Center.
2. Click More (...) > Delete Custom Role.
3. Click Delete to confirm deletion.