Tenant security administrator

A tenant security administrator can:

• Access the Self Service SAML feature in the Administration console.
• Set up single sign-on (SSO).
• Create a new identity provider (IdP) connection.
• Modify an existing IdP connection.
• Disable an existing IdP connection.
• Set up an IP allow list.
• Create and manage OAuth 2.0 clients.
• Enable or disable API key creation and revoke API keys.
• Assign exception users in Administration if enabled by a tenant administrator.
• Enable multi-factor authentication (MFA) for login.

See Assign action permissions to model roles for how to assign the role to a user.

The table below displays the resources that a tenant security administrator controls.