---
title: Manage roles in the Admin Center
slug: opti-id/docs/manage-roles-in-the-admin-center
docTags: 
createdAt: 2026-07-30T20:38:25.269Z
---

Roles determine the permission level for users in the Opti ID Admin Center and Optimizely products. [System roles](docId\:kwj5GClJJTxjDSdDQSd-o) for each product are in the Admin Center by default. You can [add custom roles](docId\:dpoq7s861EWbaBXEpc8Iv) to support individuals who manage multiple product instances with the same entitlements.

There are levels of administrators in the Opti ID Admin Center. You are presented with the most relevant page as your starting point based on your Opti ID Admin Center role. Each administrator level can invite users at the product, instance, and project levels (for Optimizely Experimentation).

Think of these as product roles, where the product is Opti ID Admin Center. They determine what you can do within the Opti ID Admin Center and do not apply to your other Optimizely products.

In addition to roles that are specific to the Opti ID Admin Center, there are roles for each of your Optimizely products in the Opti ID Admin Center. The product roles determine what your users can do in the corresponding Optimizely product.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/iLiQvcvPMxNLk3iX0DxYV-20260720-145948.png)

## View role details

The **Roles** page displays the system and custom roles for all of your Optimizely products (see the **Type** column).

1. Go to **Roles** in the Opti ID Admin Center.
2. (Optional) Use the **Product** and **Instance** filters to find roles for a specific product and instance.
3. Select a role to view more details.

   ![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/ow1Bb6CFt8TzT5o3X2Rif-20260720-145949.png)

## Create a custom role

:::hint{type="info"}
**Note**
You cannot create custom roles for Optimizely Experimentation or the Opti ID Admin Center.
:::

If the available system roles do not provide the specific access you want to grant to users, you can create a custom role.

You can also manage CMP teams in Opti ID using a custom role. See [Manage teams in Opti ID](docId\:CnfX0UHNnS3Fxmc9e2SEu) in the CMP user documentation.

1. Go to **Roles** in the Opti ID Admin Center.
2. Click **Add Role**.
3. Enter the **Role Name** in the following format: *\<Product>-\<Instance Name>-\<Role Name>*. For example, *CMP-Production1-Support*.
4. (Optional) Enter a **Description**.
5. Select a product and instance to associate the role with.
6. Select one of the following options in the **Duplicate Role** section:
   - **No** – Create the role from scratch.
   - **Yes** – Duplicate an existing role and modify it as needed. You must select the role that you want to duplicate.
7. Select the attributes for this role in the **Select Attributes** section. This lets you specify the permissions for the role.

   :::hint{type="info"}
   **Note**

   - Not available for CMS (SaaS) or CMS 12. See [Custom roles for CMS](docId\:dpoq7s861EWbaBXEpc8Iv).
   - See [Custom roles for Optimizely Agent Platform](docId\:dpoq7s861EWbaBXEpc8Iv) for an explanation of available attributes.
   :::
8. Click **Save**.

   ![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/ZDvbiDaRX5sBhN6YlSo7t-20260720-145948.png)

### Custom roles for CMS

After you create a custom role for CMS (SaaS) or CMS 12 in Opti ID and assign it to a user or group, it syncs to CMS when a user with the role logs into CMS. At that point, you must set access rights for the custom role in CMS. See [Access rights for CMS (SaaS)](docId\:GBuin5yIlxHg0c6ymgb2o) or [Access rights for CMS 12](docId\:dpoq7s861EWbaBXEpc8Iv).

### Custom roles for Configured Commerce

Creating custom roles with Optimizely Configured Commerce and Opti ID involves a few steps to ensure proper permissions and access. Custom roles created in Configured Commerce do not automatically sync with the Admin Center, and vice-versa. You must create and manage them in both systems independently.

1. Create a [custom role in the Admin Console](docId\:dpoq7s861EWbaBXEpc8Iv) starting with `ISC_` or `CMS_`.
2. Set permissions for the custom role in the [Application Dictionary](docId\:dpoq7s861EWbaBXEpc8Iv).
3. Create the same [custom role in the Admin Center](docId\:dpoq7s861EWbaBXEpc8Iv).
4. [Assign the role to a user](docId\:afJzJCmm5TkQ4CDpUlXQh) in the Admin Center.
5. Log in with that user to the Admin Console. The user gets permissions from the created role, which you can see in account details.

### Custom roles for Optimizely Agent Platform

The following is an explanation of each attribute available:

:::hint{type="info"}
**Note**
The availability of features depends on your plan type. Contact your Customer Success Manager if you have any questions.
:::

### Chat

See [Mark chat](docId\:dtNBEttEGVvkhNkwNypLM).

- **Prompt Mark and run installed agents via chat** – Prompt and run out-of-the-box agents, specialized agents, and workflow agents in Mark chat.

### Skills

See [Skills overview](docId:1HTjxW2J-ZOkYEZMwnasU).

- **View organization skills** – View organization skills (read-only access to **Skills** section).
- **Add and edit organization skills** – Add and edit organization skills in the **Skills** section.

### Agents

See [Agent overview](docId\:w7MSVijPnuFqu4nXDo_bq), [Specialized agents overview](docId\:WyA1gsk6tWr84Hum7a1Nx), and [Workflow agents overview](docId:2HD0fUsIsfdek516VtN9l).

- **View your agents and run logs** – View the **Your Agents** tab and agent configuration pages (read-only). See your own agent run log and available agents list, including workflow agents.
- **View Agent Directory** – Access **Agent Directory** to discover available agents across the organization.
- **Add, edit, and install specialized agents** – Add, edit, delete specialized agents in the **Your Agents** tab, and install agents from **Agent Directory**.
- **Add and edit workflow agents** – Add, edit, and delete workflow agents with [message triggers](docId\:dpoq7s861EWbaBXEpc8Iv).
- **Add and edit autonomous triggers in workflow agents** – Add, update, and delete non-chat triggers (scheduled, event-based, and so on) in the **Workflow Builder**.

### Tools

See [Tools overview](docId:-j4zNs-l3kIKD0n58bVPt) and [Connector tools overview](docId\:eeUZC_bU6INq4qTCkqXjU).

- **View tools** – View available tools and integrations (read-only access to the **Tools** section).
- **Manage OCP-hosted tools** – Enable and disable, sync, delete, and add Optimizely Platform (OCP) tool registries.
- **Manage custom tools** – Enable and disable, delete, and add external (non-OCP) tool registries.

### Settings

See [Agent Platform settings](docId\:pe0pbUJveWrG8ewvZWDRE).

- **Manage chat configuration** – Change inference level and enable and disable RAG in chat.
- **Manage Optimizely product connections** – Add and edit Optimizely product connections (OAuth providers) in **Settings**.
- **Manage email domain configuration** – Change email domain configuration in **Settings**.
- **Manage RAG configuration** – Configure external retrieval-augmented generation RAG (knowledge base) settings, controls the RAG icon visibility.

## Delete a role

:::hint{type="info"}
**Note**
You cannot edit or delete system roles.
:::

To delete a custom role:

1. Go to **Roles** in the Opti ID Admin Center.
2. Click **More** (**...**) > **Delete Custom Role**.
3. Click **Delete** to confirm deletion.