---
title: "Create roles and assign administrators"
slug: "content-create-roles-and-assign-administrators"
updated: 2026-07-23T10:07:41Z
published: 2026-07-23T10:07:41Z
canonical: "help.8x8.com/content-create-roles-and-assign-administrators"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.8x8.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create roles and assign administrators

To take advantage of role-based management in **8x8 Configuration Manager**, the **8x8 Contact CenterPrimary administrator** must create a role, define permissions, and assign one or more administrators to the role. The process involves the following steps:

**Step 1: Create a role and define permissions**

A role allows administrative privileges or permissions in **8x8 Configuration Manager**. Creating a role requires definition of permissions to list, view, create, edit, delete, and/or control a specified configuration object. For example, you can define a Campaign Manager role with permissions to create, manage, and supervise campaign functionality. Go to **Security > Roles** to add or edit roles.

By default, every tenant is bundled with a **Super User** role assigned to the tenant's **Primary administrator**. A **Super User** role provides all permissions to configure tenant functionality. You can assign any number of administrators to the **Super User** role.

**To add a custom role:**

1. From the **Configuration Menu**, open **Security**.
2. Go to the **Roles** tab.
3. Click ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/icon_plus_18x18.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A39%3A08Z&se=2026-11-03T23%3A39%3A08Z&sr=c&sp=r&sig=T88U7iMt7lszIptf7V5qk7jXnK%2BPtZVD3ITTO%2F6k7y4%3D) **Add Role**.

> [!NOTE]
> Note:
> 
> By default, every tenant is bundled with a **Super User** role. A **Super User** has all permissions to configure tenant functionality. You can assign any number of administrators to the **Super User** role.

> [!NOTE]
> **Note:**
> 
> The **System Default** role has viewing permissions by default. However, you can modify and allow more permission such as Write, Create, and Edit rights.
4. Enter a **Role Name**. ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/vovcc_cfgmgrsecurityrole01.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A39%3A08Z&se=2026-11-03T23%3A39%3A08Z&sr=c&sp=r&sig=T88U7iMt7lszIptf7V5qk7jXnK%2BPtZVD3ITTO%2F6k7y4%3D)
5. Determine the permissions to be given to the role.
6. Select functionality objects and check the appropriate permissions. The available permissions are: list, details, create, edit, delete, and control a functionality. The following table summarizes the role permissions:

| Role Permission | Description |
| --- | --- |
| List | Lists all the entities pertaining to an object. For example, List permission in the Agents tab allows an administrator to list all existing agents in the tenant. |
| Details | Allows to view details of each entity. For example, with the permission to view details, you can view agent account details. |
| Create | Allows you to create a specific subset of a Menu Object functionality or an entire Menu Object. For example, you may create a role with permissions to create Inbound and Outbound queues, but not Email and Chat queues within the Queues Menu Object. |
| Edit | Allows you to edit a specific subset of a Menu Object functionality or an entire Menu Object. |
| Delete | Allows you to delete a specific subset of a Menu Object functionality or an entire Menu Object. |
| Control | Allows you to control a Menu Object based on its functionality. Control permissions are available to: - Start, schedule, stop, pause, purge, and resume campaigns - Import CRM data - Broadcast messages to agents and Supervisors |
7. Click **Save** to add the new role. The next step is to assign an administrator.

**Step 2: Add Users**

If you do not have an administrator, you must create one to assign the role. See [Add Users](/documentation/docs/content-add-users) to learn how to create an administrator.

**Step 3: Assign administrators to the role**

After creating a role, you can assign an administrator to the role. The administrator inherits all permissions assigned to the role. By logging in to **8x8 Configuration Manager**, the **Secondary administrator** gets access to the functionality permitted for the role. You can also reassign an administrator to a new role.

**To assign an administrator to a role:**

1. From the **Configuration Menu**, open **Security**.
2. Go to the **Roles** tab.
3. From the Roles List, select a role to assign an administrator to.
4. Click ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/icon_edit_18x18.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A39%3A08Z&se=2026-11-03T23%3A39%3A08Z&sr=c&sp=r&sig=T88U7iMt7lszIptf7V5qk7jXnK%2BPtZVD3ITTO%2F6k7y4%3D) or **Edit**.
5. Click the **Assignment** tab.
6. From the list of administrators, select and assign an administrator to the role. ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/cfgmgrsecurityrole02_mode1.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A39%3A08Z&se=2026-11-03T23%3A39%3A08Z&sr=c&sp=r&sig=T88U7iMt7lszIptf7V5qk7jXnK%2BPtZVD3ITTO%2F6k7y4%3D)

> [!NOTE]
> Note:
> 
> You can assign multiple administrators to a role, but assign only one role per administrator. Assigning a new role to an administrator removes him from the previous role.
7. **Save** your changes.

**Step 4: Log in and validate role permissions (optional)**

After assigning an administrator to a role, you can log in and validate that the **Secondary administrator** account has the intended permissions. .

**To log in as a Secondary administrator:**

1. Go to the 8x8 Unified Login page at [https://login.8x8.com](https://sso.8x8.com/v2/login).
2. Enter the login credentials communicated to you.
3. Click **Login**. The Application Panel appears.
4. Click to open the **Virtual Contact Center Config Mgr** application. The application launches showing you the permissions set for the role.

## Change the administrator password

As a **Secondary administrator**, you can change your password by clicking **Help** in the login window. For details, refer to [Reset Username or Password](/documentation/docs/content-reset-username-or-password-unified-login).