Create a custom profile

When the default profiles don’t fit, build your own profile from a chosen set of roles and scope it to specific applications or domains.

Create the profile

Use the Profiles tab > Add New Profile option:

Then assign the roles and/or applications/domains you want the profile to grant:

Note

If you assign the Administrator, Application Owner or Viewer Read Only roles, no other roles can be assigned:

Scope access by application or domain

Within any profile (custom or predefined) you can restrict access to specific applications and/or domains. By default only the Admin profile has access to all applications and domains, so for other profiles you must explicitly grant access - otherwise users will not see any data.

Example: a profile that can add or import applications

To let users onboard new applications:

Grant the Application Owner role
Grant the All applications/domains permission