Manage roles in the Admin Center
Roles determine the permission level for users in the Opti ID Admin Center and Optimizely products. System roles for each product are in the Admin Center by default. You can add custom roles to support individuals who manage multiple product instances with the same entitlements.
There are levels of administrators in the Opti ID Admin Center. You are presented with the most relevant page as your starting point based on your Opti ID Admin Center role. Each administrator level can invite users at the product, instance, and project levels (for Optimizely Experimentation).
Think of these as product roles, where the product is Opti ID Admin Center. They determine what you can do within the Opti ID Admin Center and do not apply to your other Optimizely products.
In addition to roles that are specific to the Opti ID Admin Center, there are roles for each of your Optimizely products in the Opti ID Admin Center. The product roles determine what your users can do in the corresponding Optimizely product.
View role details
The Roles page displays the system and custom roles for all of your Optimizely products (see the Type column).
- Go to Roles in the Opti ID Admin Center.
- (Optional) Use the Product and Instance filters to find roles for a specific product and instance.
- Select a role to view more details.
Create a custom role
You cannot create custom roles for Optimizely Experimentation or the Opti ID Admin Center.
If the available system roles do not provide the specific access you want to grant to users, you can create a custom role.
You can also manage CMP teams in Opti ID using a custom role. See Manage teams in Opti IDManage teams in Opti ID in the CMP user documentation.
- Go to Roles in the Opti ID Admin Center.
- Click Add Role.
- Enter the Role Name in the following format: <Product>-<Instance Name>-<Role Name>. For example, CMP-Production1-Support.
- (Optional) Enter a Description.
- Select a product and instance to associate the role with.
- Select one of the following options in the Duplicate Role section:
- No – Create the role from scratch.
- Yes – Duplicate an existing role and modify it as needed. You must select the role that you want to duplicate.
- Select the attributes for this role in the Select Attributes section. This lets you specify the permissions for the role.
- Not available for CMS (SaaS) or CMS 12. See Custom roles for CMS.
- See Custom roles for Optimizely Opal for an explanation of available attributes.
- Click Save.
Custom roles for CMS
After you create a custom role for CMS (SaaS) or CMS 12 in Opti ID and assign it to a user or group, it syncs to CMS when a user with the role logs into CMS. At that point, you must set access rights for the custom role in CMS. See Access rights for CMS (SaaS)Access rights for CMS (SaaS) or Access rights for CMS 12.
Custom roles for Configured Commerce
Creating custom roles with Optimizely Configured Commerce and Opti ID involves a few steps to ensure proper permissions and access. Custom roles created in Configured Commerce do not automatically sync with the Admin Center, and vice-versa. You must create and manage them in both systems independently.
- Create a custom role in the Admin Console starting with ISC_ or CMS_.
- Set permissions for the custom role in the Application Dictionary.
- Create the same custom role in the Admin Center.
- Assign the role to a user in the Admin Center.
- Log in with that user to the Admin Console. The user gets permissions from the created role, which you can see in account details.
Custom roles for Optimizely Opal
The following is an explanation of each attribute available:
The availability of features depends on your plan type. Contact your Customer Success Manager if you have any questions.
Chat
See Optimizely Opal ChatOptimizely Opal Chat.
- Prompt Opal and run installed agents via chat – Prompt and run out-of-the-box agents, specialized agents, and workflow agents in Opal Chat.
Instructions
- View instructions – View instructions (read-only access to Instructions section).
- Add and edit instructions – Add and edit instructions in the Instructions section.
Agents
See Agent overviewAgent overview, Specialized agents overviewSpecialized agents overview, and Workflow agents overviewWorkflow agents overview.
- View your agents and run logs – View the Your Agents tab and agent configuration pages (read-only). See your own agent run log and available agents list, including workflow agents.
- View Agent Directory – Access Agent Directory to discover available agents across the organization.
- Add, edit, and install specialized agents – Add, edit, delete specialized agents in the Your Agents tab, and install agents from Agent Directory.
- Add and edit workflow agents – Add, edit, and delete workflow agents with message triggers.
- Add and edit autonomous triggers in workflow agents – Add, update, and delete non-chat triggers (scheduled, event-based, and so on) in the Workflow Builder.
Tools
See Tools overviewTools overview and Connector tools overviewConnector tools overview.
- View tools – View available tools and integrations (read-only access to the Tools section).
- Manage OCP-hosted tools – Enable and disable, sync, delete, and add Optimizely Platform (OCP) tool registries.
- Manage custom tools – Enable and disable, delete, and add external (non-OCP) tool registries.
Settings
See Opal settings.
- Manage chat configuration – Change inference level and enable and disable RAG in chat.
- Manage Optimizely product connections – Add and edit Optimizely product connections (OAuth providers) in Settings.
- Manage email domain configuration – Change email domain configuration in Settings.
- Manage RAG configuration – Configure external retrieval-augmented generation RAG (knowledge base) settings, controls the RAG icon visibility.
Delete a role
You cannot edit or delete system roles.
To delete a custom role:
- Go to Roles in the Opti ID Admin Center.
- Click More (...) > Delete Custom Role.
- Click Delete to confirm deletion.