A Tenant Security Administrator can:
- Access the Self Service SAML feature in the Administration Console (via the SSO tab)
- Create a new identity provider (IdP) connection
- Modify an existing IdP connection
- Disable an existing IdP connection
Tenant Security Admin Policy
Resource Type | CREATE | READ | UPDATE | DELETE |
Workspace | false | true | false | false |
Tenant | false | true | false | false |
Connection | true | true | true | true |
Role Membership | false | true | false | false |
Clients | true | true | true | true |