--- title: "Create roles and assign administrators" slug: "create-roles-and-assign-administrators" updated: 2026-07-23T10:07:36Z published: 2026-07-23T10:07:36Z canonical: "help.8x8.com/create-roles-and-assign-administrators" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.8x8.com/llms.txt > Use this file to discover all available pages before exploring further. # Create roles and assign administrators To take advantage of role-based management in **8x8 Configuration Manager**, the **8x8 Contact CenterPrimary administrator** must create a role, define permissions, and assign one or more administrators to the role. The process involves the following steps: **Step 1: Create a role and define permissions** A role allows administrative privileges or permissions in **8x8 Configuration Manager**. Creating a role requires definition of permissions to list, view, create, edit, delete, and/or control a specified configuration object. For example, you can define a Campaign Manager role with permissions to create, manage, and supervise campaign functionality. Go to **Security > Roles** to add or edit roles. By default, every tenant is bundled with a **Super User** role assigned to the tenant's **Primary administrator**. A **Super User** role provides all permissions to configure tenant functionality. You can assign any number of administrators to the **Super User** role. **To add a custom role:** 1. From the **Configuration Menu**, open **Security**. 2. Go to the **Roles** tab. > [!NOTE] > Note: > > You can assign the role of an administrator when creating a new user. As soon as you choose a user to be an administrator, the option to select a specific role appears. You can continue to define the [Roles and Administrators](/documentation/docs/roles-and-administrators) in Security tab. 3. Click ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/icon_plus_18x18.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) **Add Role**. > [!NOTE] > Note: > > By default, every tenant is bundled with a **Super User** role. A **Super User** has all permissions to configure tenant functionality. You can assign any number of administrators to the **Super User** role. 4. Enter a **Role Name**.![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/cfgmgrsecurityrole01_mode1.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) 5. Determine the permissions to be given to the role. 6. Select functionality objects and check the appropriate permissions. The available permissions are: list, details, create, edit, delete, and control a functionality. The following table summarizes the role permissions: | Role Permission | Description | | --- | --- | | List | Lists all the entities pertaining to an object. For example, List permission in the Agents tab allows an administrator to list all existing agents in the tenant. | | Details | Allows to view details of each entity. For example, with the permission to view details, you can view agent account details. | | Create | Allows you to create a specific subset of a Menu Object functionality or an entire Menu Object. For example, you may create a role with permissions to create Inbound and Outbound queues, but not Email and Chat queues within the Queues Menu Object. | | Edit | Allows you to edit a specific subset of a Menu Object functionality or an entire Menu Object. | | Delete | Allows you to delete a specific subset of a Menu Object functionality or an entire Menu Object. | | Control | Allows you to control a Menu Object based on its functionality. Control permissions are available to: - Start, schedule, stop, pause, purge, and resume campaigns - Import CRM data - Broadcast messages to agents and Supervisors | 7. Click **Save** to add the new role. The next step is to assign an administrator. **Step 2: Add administrators** An administrator inherits permissions assigned to a role and can assume a single role at a time. You cannot assign multiple roles to an administrator, but multiple administrators may function in a single role. **To add an administrator:** 1. From the **Configuration Menu**, open **Security**. 2. Go to the **Administrators** tab.![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/cmsecutiyadmin01_mode1.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) 3. Click ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/icon_plus_18x18.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) **Add Administrator**. 4. Fill in the following mandatory fields: | Field Name | Description | | --- | --- | | First Name | Enter the first name of the Administrator. | | Last Name | Enter the last name of the Administrator. | | Email Address | Enter an Email ID to communicate with the Administrator. | | Role | Select a role from the list of defined roles. | | User Name | Enter a username used to log in to the administrator role. | | Password | Enter a password. > [!NOTE] > Note: > > Password should match the password policy requirements. | | Retype Password | Confirm the password. | | Language | Enter a language of choice for the Administrator user interface. | | Enabled | Select the check box to activate the Administrator. | | Comment | Enter any comments. | 5. Click **Save** to create an administrator. **Step 3: Assign administrators to the role** After creating a role, you can assign an administrator to the role. The administrator inherits all permissions assigned to the role. By logging in to **8x8 Configuration Manager**, the **Secondary administrator** gets access to the functionality permitted for the role. You can also reassign an administrator to a new role. **To assign an administrator to a role:** 1. From the **Configuration Menu**, open **Security**. 2. Go to the **Roles** tab. 3. From the Roles List, select a role to assign an administrator to. 4. Click ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/icon_edit_18x18.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) or **Edit**. 5. Click the **Assignment** tab. 6. From the list of administrators, select and assign an administrator to the role.![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/cfgmgrsecurityrole02_mode1.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) > [!NOTE] > Note: > > You can assign multiple administrators to a role, but assign only one role per administrator. Assigning a new role to an administrator removes him from the previous role. 7. **Save** your changes. **Step 4: Log in and validate role permissions (optional)** After assigning an administrator to a role, you can log in and validate that the **Secondary administrator** account has the intended permissions. . ## Change the administrator password A **Secondary administrator** can change password and set up a security question by clicking **Profile** on the top bar of the **8x8 Contact Center** application. ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/cfgmgrrolesmyprofile.png?sv=2026-02-06&spr=https&st=2026-11-03T22%3A19%3A01Z&se=2026-11-03T23%3A19%3A01Z&sr=c&sp=r&sig=GrIecxHqn67j9AV100BmNv%2FvUZGjNJAVyB9UDuoHsHA%3D) 1. Log in to **8x8 Configuration Manager**. 2. Click **My Profile** at the top of the screen. 3. Enter a new password or security question. 4. Click **Save**.