Built-in roles explained
The eight roles that come with AssetTrove, what each one can do, and how to choose.
Every person, group and API key gets access through roles. AssetTrove comes with eight built-in roles that cover most organisations.
| Role | Who it's for | What they can do |
|---|---|---|
| Owner | The people ultimately responsible for AssetTrove | Everything, including billing. There must always be at least one active owner |
| Admin | IT administrators | Everything except billing and changing who is an owner |
| Asset manager | IT and service desk staff who handle devices | Create, update, assign, retire and dispose of hardware; resolve discovery conflicts; read software, licences, finance and compliance |
| Licence manager | Software asset managers | Contracts, entitlements, allocations, software catalogue, reconciliation and reclamation; read hardware and discovery |
| Finance | Finance and controlling | Asset values, depreciation settings and closing periods; read assets, licences and licence positions |
| Auditor | Internal or external auditors | Read everything, and export the audit log. Can't change anything |
| Employee | Everyone else | See only the devices and licences assigned to them. See What employees see |
| Integration | API keys for discovery agents | Send discovery data and read assets |
How roles combine
- People can have several roles, and they get everything any of them allows.
- Roles can be given to a person, to a group (everyone in the group gets it), or to an API key.
- A role can apply to the whole organisation, or be limited to one location or cost centre.
Protections built in
- You can't remove the last owner. AssetTrove refuses to deactivate or demote the only active owner, so the organisation is never left without one.
- Built-in roles can't be edited. If you need something different, create a custom role.
- Nobody can hand out more than they have. When you invite someone or create an API key, you can only give roles whose permissions you hold yourself.
Still have a question? Email rory@assettrove.eu and we'll get back to you.