SonicWall Unified Management Administration Guide
Table of Contents
User Groups Roles and Privileges
| Action | Privileges | Conditions / Examples |
|---|---|---|
| Create a New User Group | Super Admins and Admins can create a new User Group. | Employees with User Access Management = No Access cannot access the User Groups tab; they can only see the User List. |
| Add or Remove Users from a User Group | Super Admins, Admins, and Employees with User Access Management = Admin can add or remove users from a User Group. | Super Admins cannot be removed from any User Group. All Super Admins are automatically included in every User Group. |
| Add or Remove Tenants from a User Group | Super Admins, Admins, and Employees with User Access Management = Admin can add or remove tenants from a User Group. | Employees with User Access Management = Admin can see the option, but the action is restricted through workflow. |
| Define Tenant Permissions (Platform Access) | Super Admins, Admins, and Employees with User Access Management = Admin can define or modify Tenant-level access in a User Group. | |
| Define Product Permissions | Super Admins, Admins, and Employees with User Access Management = Admin can define or modify Product permissions in a User Group. | Product permissions work together with Tenant permissions. Least‑permissive rules apply if users belong to multiple groups. |
| Rename a User Group | Super Admins, Admins, and Employees with User Access Management = Admin can rename a User Group. | All other roles have read‑only visibility. |
| Change Default User Group | Super Admins, Admins, and Employees with User Access Management = Admin can change the default User Group. | All other roles have read‑only access to this setting. |
| Delete a User Group | Super Admins, Admins, and Employees with User Access Management = Admin can delete a User Group. | Default User Groups cannot be deleted unless another group is set as default first. |
| Display User Groups |
Super Admins, Admins, and Employees with User Access Management = Admin view all three tabs, User Group, Affiliations, and User List. |
Users with No Access can view only the User List. Affiliations and User Group tabs are disabled. |
| Generate My API Key | All users can generate or delete their own API key. | — |
