License editions: To understand the applicable license editions, see Plans & Pricing.

Overview

The predefined Admin roles are a combination of rights required to access and manage the Endpoints, SaaS Apps, and Data Governance. Only the Cloud Admin can create and assign roles to Admins.

Individual rights are grouped based on the access areas in the Endpoints, SaaS Apps, and Data Governance. This topic describes each area, also known as category, the default rights assigned to the predefined roles, and tasks that Admins can perform using these rights.

❗ Important

By default, all rights are applicable to the Druva Cloud Administrator.
Only Druva Cloud Administrator and Cloud Administrator roles are available for the Business edition.

To access the Roles and Rights

On the Endpoints/SaaS Apps page, click SettingsSettings > Manage Administrators.
In the left navigation bar, click Roles.
Click on the role whose rights you want to view. You can see the rights in the Assigned Rights section.

💡 Tip

You can edit any predefined role and assign required rights based on your organization's requirements. See Manage rights for more details

Category: User Management

Create and import users

The following table lists the tasks that Admins can perform with the Create and import users right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Manually import users from your Active Directory	✅	❌	❌	✅	❌	✅	❌	❌
Add users individually	✅	❌	❌	✅	❌	✅	❌	❌
Add a group of users by importing their information from a CSV file	✅	❌	❌	✅	❌	✅	❌	❌

Manage users

The following table lists the tasks that Admins can perform with the Manage users right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Synchronize inSync users with your Active Directory	✅	❌	❌	✅	❌	✅	❌	❌
Preserve and Enable users	✅	❌	❌	✅	❌	✅	❌	❌
Change storage assigned to a user	✅	❌	❌	✅	❌	✅	❌	❌
Reset the password for a user	✅	❌	❌	✅	❌	✅	❌	❌
Change quota for the user	✅	❌	❌	✅	❌	✅	❌	❌

Delete users

The following table lists the tasks that Admins can perform with the Delete users right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Delete users	✅	❌	❌	✅	❌	✅	❌	❌

Changed assigned profile

The following table lists the tasks that Admins can perform with the Changed assigned profile right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Update the profile assigned to users	✅	❌	❌	❌	❌	✅	❌	❌

Download Auth keys

The following table lists the tasks that Admins can perform with the Download Auth keys right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Download the authentication key	✅	❌	❌	❌	❌	❌	❌	❌

Download debug logs

The following table lists the tasks that Admins can perform with the Download debug logs right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Download debug logs	✅	❌	❌	❌	✅	❌	❌	❌

📝 Note
For a Legal Administrator, the Download debug logs right will be enabled by default.

Access user audit trails

The following table lists the tasks that Admins can perform with the Access user audit trails right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Access user audit trails from Data Governance	✅	❌	✅	❌	❌	✅	✅	✅
Access user audit trails from Workspaces	✅	❌	✅	❌	❌	✅	✅	✅

Category: Workload Management

Manage Client Upgrade

The following table lists the tasks that other Admins can perform with the Manage Client Upgrade right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Upgrade inSync Client	✅	✅	❌	❌	❌	❌	❌	❌
Download List of users	✅	✅	❌	❌	❌	❌	❌	❌
Cancel upgrade	✅	✅	❌	❌	❌	❌	❌	❌
Download Report	✅	✅	❌	❌	❌	❌		❌

Upgrade inSync Client

The following table lists the tasks that other Admins can perform with the Upgrade inSync Client right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Upgrade inSync Client on user laptops	✅	✅	❌	❌	❌	❌	❌	❌

Replace Device / Enable Troubleshooting

Mark old device for replace

The following table lists the tasks that other Admins can perform with the Mark old device for replace right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Mark old device for replace	✅	✅	❌	✅	❌	✅	❌	❌

Enable Troubleshooting

The following table lists the tasks that other Admins can perform with the Enable Troubleshooting right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Enable troubleshooting	✅	✅	❌	✅	❌	✅	❌	❌

Manage Device Mapping

The following table lists the tasks that other Admins can perform with the Manage Device Mapping right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Import Device Map CSV	✅	✅	❌	❌	❌	❌	❌	❌
Delete a device mapping	✅	✅	❌	❌		❌	❌	❌

Decommission devices

The following table lists the tasks that other Admins can perform with the Decommission devices right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Decommission a laptop	✅	✅	❌	✅	❌	✅	❌	❌
Decommission a mobile device	✅	✅	❌	✅	❌	✅	❌	❌
Place auto-delete on hold for a device	✅	✅	❌	✅	❌	✅	❌	❌
Remove the auto-delete hold status for a device	✅	✅	❌	✅	❌	✅	❌	❌

Manage Workload

The following table lists the tasks that other Admins can perform with the Manage Workload right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Enable device	✅	✅	❌	✅	❌	✅	❌	❌
Disable device	✅	✅	❌	✅	❌	✅	❌	❌
Additional Tasks for Microsoft SharePointOnline
Auto Configuration	✅	✅	❌	✅	❌	✅	❌	❌
Auto Discover Sites for Backup	✅	✅	❌	✅	❌	✅	❌	❌
Auto Assign Storage	✅	✅	❌	✅	❌	✅	❌	❌
Apply default backup settings	✅	✅	❌	✅	❌	✅	❌	❌
Discover Sites	✅	✅	❌	✅	❌	✅	❌	❌
Add Site Collection	✅	✅	❌	✅	❌	✅	❌	❌
View the sites	✅	✅	❌	✅	❌	✅	❌	❌
Additional Tasks for Microsoft Teams
Auto Configuration	✅	✅	❌	✅	❌	✅	❌	❌
Auto Discover Teams for Backup	✅	✅	❌	✅	❌	✅	❌	❌
Auto Assign Storage	✅	✅	❌	✅	❌	✅	❌	❌
Default backup settings	✅	✅	❌	✅	❌	✅	❌	❌
Discover teams	✅	✅	❌	✅	❌	✅	❌
Edit or Customize backup and retension settings	✅	✅	❌	✅	❌	✅	❌	❌
Enable or disable a team	✅	✅	❌	✅	❌	✅	❌	❌
Additional Tasks for Microsoft Public Folder
Auto Configuration		✅	❌	✅	❌	✅	❌	❌
Auto Discover Public Folder for Backup	✅	✅	❌	✅	❌	✅	❌	❌
Auto Assign Storage	✅	✅	❌	✅	❌	✅	❌	❌
Default backup settings	✅	✅	❌	✅	❌	✅	❌	❌
Discover Public Folder	✅	✅	❌	✅	❌	✅	❌	❌
Add Public Folder	✅	✅		✅	❌	✅	❌	❌
Additional Tasks for Google Shared Drive
Auto Configuration	✅	✅	❌	✅	❌	✅	❌
Auto Discover Shared Drives for Backup	✅	✅	❌	✅	❌	✅	❌	❌
Auto Assign Storage	✅	✅	❌	✅	❌	✅	❌	❌
Default backup settings	✅	✅		✅	❌	✅	❌	❌
Discover Shared Drives	✅	✅	❌	✅	❌	✅	❌	❌
Add Shared Drives	✅	✅	❌	✅	❌	✅	❌	❌

Delete Workload

The following table lists the tasks that other Admins can perform with the Delete Workload right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Delete devices	✅	✅	❌	✅	❌	✅	❌	❌
Delete a team	✅	✅	❌	✅	❌	✅	❌	❌

Category: inSync ShareManagement

Create and manage workspaces, guest users and groups

The following table lists the tasks that other administrators can perform with the Create and manage workspaces, guest users and groups right and the predefined administrator roles applicable to this right.

Right	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Create workspaces	✅	❌	❌	❌	❌	✅	❌	❌
Manage workspace data	✅	❌	❌	❌	❌	✅	❌	❌
Create share groups	✅	❌	❌	❌	❌	✅	❌	❌
View and download workspace data	✅	❌	❌	❌	❌	✅	❌	❌
Manage share groups	✅	❌	❌	❌	❌	✅	❌	❌
Add and remove users from inSync Share group	✅	❌	❌	❌	❌		❌	❌
Reset the password of a guest user	✅	❌	❌	❌	❌	✅	❌	❌

Delete workspaces, guest users and groups

The following table lists the tasks that other administrators can perform with theDelete workspaces, guest users and groups right and the predefined administrator roles applicable to this right.

Tasks	Cloud Administrator	Workload Admin	Data Protection Officer	Help Desk Administrator	Legal Administrator	Profile Administrator	View Only Admin	Sensitive Data Governance Admin
Delete workspaces	✅	❌	❌	❌	❌	✅	❌	❌
Delete share groups	✅	❌	❌	❌	❌	✅	❌	❌
Delete guest users	✅	❌	❌	❌	❌	✅	❌	❌

Category: Deployment Management

View inSync settings

The following table lists the tasks that other Admins can perform with the View inSync settings right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
View inSync settings	✅	❌	❌	❌	❌	❌	✅	✅

Edit inSync settings

The following table lists the tasks that other Admins can perform with the Edit inSync settings right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Email settings Sender name, signature, and reply-to address to emails	✅	❌	❌	❌	❌	❌	❌	❌
Network settings Restrict data networks for laptop backups	✅	❌	❌	❌	❌	❌	❌	❌
Mobile Credentials setting Configure certificates for iOS devices	✅	❌	❌	❌	❌	❌	❌	❌
Password Policy settings Enable password policy for Admins Enable password policy for users	✅	❌	❌	❌	❌	❌	❌	❌
Single Sign-On setting Configure Single Sign-On for inSync users	✅	❌	❌	❌	❌	❌	❌	❌
Co-branding setting Co-branding inSync	✅	❌	❌	❌	❌	❌	❌	❌
Data Governance settings Audit retention policy for users Audit retention policy for Admins	✅	❌	❌	❌	❌	❌	❌	❌

Manage AD deployments

The following table lists the tasks that other Admins can perform with the Manage AD deployments right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Install or upgrade inSync AD Connector	✅	❌	❌	❌	❌	❌	❌	❌
Configure the inSync AD Connector	✅	❌	❌	❌	❌	❌	❌	❌
Create AD mappings	✅	❌	❌	❌	❌	❌	❌	❌
Delete AD mappings	✅	❌	❌	❌	❌	❌	❌
Install AD connectors	✅	❌	❌	❌	❌	❌	❌	❌
Register AD Accounts with inSync	✅	❌	❌	❌	❌	❌	❌	❌
Update your AD Accounts credentials	✅	❌	❌	❌	❌	❌	❌	❌
Delete AD Accounts from inSync	✅	❌	❌	❌	❌	❌	❌	❌
AD/LDAP Settings	✅	❌	❌	❌	❌	❌	❌	❌
Manage mass deployment tokens	✅	❌	❌	❌	❌	❌	❌	❌

Configure Apps

The following table lists the tasks that other Admins can perform with the Configure Apps right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
SaaS Apps Configuration and Reconfiguration	✅	❌	❌	❌	❌	❌	❌	❌

Category: Profile Management

Create profiles

The following table lists the tasks that other Admins can perform with the Create profiles right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Create a profile	✅	❌	❌	❌	❌	❌	❌	❌
Create profiles based on an existing profile	✅	❌	❌	❌	❌	❌	❌	❌

Delete profiles

The following table lists the tasks that other Admins can perform with the Delete profiles right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Delete profiles	✅	❌	❌	❌	❌	❌	❌	❌

Edit General Settings

The following table lists the tasks that other Admins can perform with the Edit General Settings right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Update the maximum number of users for a profile	✅	❌	❌	❌	❌	✅	❌	❌
Update Share settings	✅	❌	❌	❌	❌	✅	❌	❌
Update the user data privacy policy	✅	❌	❌	❌	❌	✅	❌	❌
Allow web restore for users	✅	❌	❌	❌	❌	✅	❌	❌
Configure login mechanism using the inSync Password	✅	❌	❌	❌	❌	✅	❌	❌
Configure login mechanism using Active Directory	✅	❌	❌	❌	❌	✅	❌	❌

Category: Backup and Restore Management

Manage backup

The following table lists the tasks that other Admins can perform with the Manage backup and restore right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Start data backup	✅	✅	❌	✅	❌	✅	❌	❌
Pause auto-refresh of live activities	✅	✅	❌	✅	❌	✅	❌	❌
Resume auto-refresh of live activities	✅	✅	❌	✅	❌	✅	❌	❌
Cancel live activities	✅	✅	❌	✅	❌	✅	❌	❌

Manage restore

The following table lists the tasks that other Admins can perform with the Manage backup and restore right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
View snapshots of backup data	✅	✅	❌	✅	❌	✅	❌	❌
Restore data	✅	✅	❌	✅		✅	❌	❌
Pause auto-refresh of live activities	✅	✅	❌	✅	❌	✅	❌	❌
Resume auto-refresh of live activities	✅	✅	❌	✅	❌	✅	❌	❌
Cancel live activities	✅	✅	❌	✅	❌	✅	❌	❌

Delete snapshots

The following table lists the tasks that other Admins can perform with the Deletesnapshots right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Delete snapshots	✅	✅	❌	❌	❌	❌	❌	❌

Edit Backup Settings

The following table lists the tasks that other Admins can perform with the Edit Backup Settings right and the predefined Admin roles applicable to this right.

📝 Note
This permission is applicable only to the profile/user-level apps. It does not apply to org-level apps.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Assign user quota for data backup	✅	✅	❌	❌	❌	✅	❌	❌
Allow users to activate inSync	✅	✅	❌	❌	❌	✅	❌	❌
Configure the user data privacy policy	✅	✅	❌	❌	❌	✅	❌	❌
Edit backup content	✅	✅	❌	❌	❌	✅	❌	❌
Edit backup schedules	✅	✅	❌	❌	❌	✅	❌	❌
Update the data loss prevention permissions for devices	✅	✅	❌	❌	❌	✅	❌	❌
Update the mobile data permissions for users	✅	✅	❌	❌	❌	✅	❌	❌
Update the backup retention policy	✅	✅	❌	❌	❌	✅	❌	❌
Update inSync notifications	✅	✅	❌	❌	❌	✅	❌	❌
Mark user devices as inactive	✅	✅	❌	❌	❌	✅	❌	❌
Configure folders for backup	✅	✅	❌	❌	❌	✅	❌	❌
Configure the global exclude list	✅	✅	❌	❌	❌	✅	❌	❌
Configure custom folders for backup	✅	✅	❌	❌	❌	✅	❌	❌
Include emails for backup	✅	✅	❌	❌	❌	✅	❌	❌
Allow users to configure backup folders	✅	✅	❌	❌	❌	✅	❌	❌
Update the schedule for automated backups	✅	✅	❌	❌	❌	✅	❌	❌
Allow or disallow users to update laptop backup	✅	✅	❌	❌	❌	✅	❌	❌
Allow or disallow users to pause laptop backups	✅	✅	❌	❌	❌	✅	❌	❌
Configure Cloud Apps for backup	✅	✅	❌	❌	❌	✅	❌	❌
Configure the global exclude list	✅	✅	❌	❌	❌	✅	❌	❌
Update the schedule for automated backups	✅	✅	❌	❌	❌	✅	❌	❌

Download Data

The following table lists the tasks that other administrators can perform with the Download Data right and the predefined administrator roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Download user data	✅	✅	✅	❌	✅	❌	❌	❌
View and download share data for the user	✅	✅	✅	❌	✅	❌	❌	❌
View and download share data for the guest users	✅	✅	✅	❌	✅	❌	❌	❌
View and download workspace data	✅	✅	✅	❌	✅	❌	❌	❌
Download the snapshot data for SaaS Apps	✅	✅	✅	❌	✅	❌	❌	❌

📝 Note
For a Legal administrator, the Download Data right is enabled by default.

Bulk export user data

The following table lists the tasks that other administrators can perform with the Bulk export user data right and the predefined administrator roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Bulk export data		✅	✅	❌	❌	❌	❌	❌

Category: Data Governance

Access Federated Search

The following table lists the tasks that other Admins can perform with the Access Federated Search right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Access Federated Search	✅	❌	✅	✅	✅	✅	✅	✅

📝 Note
For a Legal Administrator, the Access Federated Search right is enabled by default.

Track device location

The following table lists the tasks that other Admins can perform with the Track device location right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Trace user device	✅	❌	❌	❌	❌	❌	❌	❌

View violation and settings

Manage compliance violations

The following table lists the tasks that other Admins can perform with the Manage compliance violations right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Access Sensitive Data Governance page	✅	❌	❌	❌	❌	❌	❌	✅
Manage violations	✅	❌	❌	❌	❌	❌	❌	✅

Manage compliance settings

The following table lists the tasks that other Admins can perform with the Manage compliance settings right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Edit Sensitive Data Governance policies, policy templates,sensitive data types	✅	❌	❌	❌	❌	❌	❌	✅
Modify Sensitive Data Governance settings	✅	❌	❌	❌	❌	❌	❌	✅

Category: Alerts and Reports Management

View and download reports and view alerts

The following table lists the tasks that other Admins can perform with theAlerts and Reports Managementright and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
View reports	✅	❌	✅	✅	❌	✅	✅	✅
Download reports	✅	❌	✅	✅	❌	✅	✅	✅
View alerts	✅	❌	✅	✅	❌	✅	✅	✅

Change report schedules

The following table lists the tasks that other Admins can perform with the Change report schedules right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Change report schedules	✅	❌	✅	❌	❌	✅	✅	✅

Category: CloudCache Management

Manage CloudCache Servers

The following table lists the tasks that other Admins can perform with the Manage CloudCache Servers right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Add, install, and register inSync CloudCache Server	✅	❌	❌	❌	❌	❌	❌	❌
Configure inSync CloudCache Server	✅	❌	❌	❌	❌	❌	❌	❌
Manage inSync CloudCache Server	✅	❌	❌	❌	❌	❌	❌	❌

Manage users on CloudCache

The following table lists the tasks that other Admins can perform with the Manage users on CloudCache right and the predefined Admin roles applicable to this right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Prepare users for restore	✅	❌	❌	✅	❌	✅	❌	❌
Manage users on inSync CloudCache Server	✅	❌	❌	✅	❌	✅	❌	❌

Category: Legal Hold Management

📝 Note
You can assign Legal Hold Management rights to any role while creating an administrator or editing an existing administrator.

For more information about Legal Hold Management rights, see Legal Hold.

Create and manage Legal Holds

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the Create and manage Legal Holds right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Create and manage Legal Holds	✅	❌	❌	❌	✅	❌	❌	❌

View Legal Hold

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the View Legal Hold right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
View Legal Hold	✅	❌	❌	❌	✅	❌	❌	❌

Delete Legal Hold

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the Delete Legal Hold right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Delete Legal Hold	✅	❌	❌		✅	❌	❌	❌

View Legal Hold settings

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the View Legal Hold settings right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
View Legal Hold settings	✅	❌	❌	❌	✅	❌	❌	❌

Manage Legal Hold settings

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the Manage Legal Hold settings right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Manage Legal Hold settings	✅	❌	❌	❌	✅	❌	❌	❌

View Legal Hold Clients

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the View Legal HoldClients right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
View Legal Hold Clients	✅		❌	❌	✅	❌	❌	❌

Manage Legal Hold Clients

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the Manage Legal HoldClients right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Manage Legal Hold Clients	✅	❌	❌	❌	✅	❌	❌	❌

Delete Legal Hold Clients

The following table lists the tasks that only a Cloud Admin and Legal admin can perform with the Delete Legal HoldClients right.

Tasks	Cloud Admin	Workload Admin	Data Protection Officer	Help Desk Admin	Legal Admin	Profile Admin	View Only Admin	Sensitive Data Governance Admin
Delete Legal Hold Clients	✅	❌	❌	❌	✅	❌	❌	❌

Supported Cloud Apps Editions

inSync administrator roles

Predefined roles and rights

Feature support matrix

SaaS Apps and Endpoints administrator roles