Many of our partners have set up AE user accounts for their clients, allowing their administrators to approve their own requests. Typically, these users are assigned the "Technician (Level 1)" or "Technician (Level 2)" role to prevent them from modifying their permissions or accessing other user accounts.
We've created a comprehensive document that outlines the permissions associated with each role and provides guidance on restricting Company Access. You can access this document here.
However, there is a limitation with the current setup. Level 2 Technicians cannot create Advanced Rules (e.g., publisher or file attributes). If you do want them to have this capability, you can make a request to our support team for a new role on your system called "Downstream Admin."
The "Downstream Admin" role offers the same permissions as Tech Level 3, except these users cannot view your global settings or manage other users. Here are the permissions associated with this role:
- Requests: View/Edit
- Rules: View/Add/Edit/Delete
- Advanced Rules: Add/Edit
- Computers: View/Edit/Delete
- Companies: View/Add/Edit/Delete
- Locations: View/Add/Edit/Delete
- Events: View
This setup provides flexibility, allowing you to tailor permissions based on your specific requirements.