Manage admins and roles

Last updated November 5th, 2025

On this tab

Manage admins and roles

Knox Asset Intelligence lets you add other administrators to the console in order to view or manage your devices and dashboard data. The general process for adding admins and creating roles is the same for all Knox Suite products, and is documented in Manage Knox service administrators.

Role-based data access

When defining roles for your Knox Asset Intelligence admins, you can use Data access permissions to grant or deny access to certain dashboard insights and console features. Admins must be granted access to an insight or feature in order to use it on the console.

The following list describes each Data access permission and its associated dashboard insight or feature:

Diagnostics

Provides admins with access to the Diagnostics page. If granted, admins can view the following logs on the console:

TCPdump logs
Device debug logs
Snapshots

If you want to also let admins request a log or snapshot, then you’ll have to also grant the role permission for Devices and Uploads > Manage devices > Accept, reject, upload, unenroll devices, manage tags, request debug log, and send permission notifications.

Apps

Provides admins with access to the Apps dashboard insights. If selected, admins can view these insights on the main Dashboard:

If you also grant the role permission for Dashboard > Manage dashboard view and data collection, then admins can go to Settings > Customize to show or hide these insights, and Settings > Data Conditions > Data upload to modify the App data collection settings.

Network

Provides admins with access to the Network dashboard insights. If selected, admins can view these insights on the main Dashboard:

Network latency response times
Wi-Fi disconnection events: Groups
Wi-Fi disconnection events: BSSIDs and APs
Mobile network usage
Data usage by connection type

Battery

Provides admins with access to the Battery dashboard insights. If selected, admins can view these insights on the main Dashboard:

Battery status
Battery state of health
Groups with low battery devices at shift start
Groups with low battery events
Low battery events
Battery drain events
Charge events
Battery level at shift start
Battery level at shift end

If you also grant the role permission for Dashboard > Manage dashboard view and data collection, then admins can go to Settings > Customize to show or hide these insights, and Settings > Data Conditions > Data upload to modify the Battery data collection settings.

Location

Provides admins with access to the Location dashboard. If selected, admins can view the Location dashboard map, as well as the following pages:

Assets
Venues (Labs)
Analytics (Labs)

If you also grant the role permission for Dashboard > Manage dashboard view and data collection, then admins can go to Settings > Customize to get access to these additional Location dashboard features:

Security

Provides admins with access to the Security Center. Security center is only visible on the main Dashboard. Once granted, admins can also go to Settings > Customize to show or hide the Security center from the main Dashboard.

System

Provides admins with access to the system dashboard insights. System insights are only visible on the main Dashboard. If selected, admins can view the following insights:

Storage usage status

If you also grant the role permission for Dashboard > Manage dashboard view and data collection, then admins can go to Settings > Customize to show or hide these insights and Settings > Data Conditions > Data upload to modify data collection settings for these insights.

Miscellaneous

Provides admins with access to the miscellaneous dashboard insights. Miscellaneous insights are only visible on the main Dashboard. If selected, admins can view the following insights:

Device drops
Knox Service Plugin status
Knox Service Plugin profile failed: Error categories
Knox Service Plugin profile failed: Failure policies
Scanning performance

If you also grant the role permission for Dashboard > Manage dashboard view and data collection, then admins can go to Settings > Customize to show or hide these insights and Settings > Data Conditions > Data upload to modify data collection settings for these insights.

This document was updated for the Knox cloud services 25.11 UAT.

On this tab

The Administrators & Roles page allows you to invite other admins in your organization to help manage your Knox Asset Intelligence data. When inviting other admins to Knox Asset Intelligence, you can choose to grant them view only access to your data, full access to all features, or bespoke access to specific features using a custom Role.

Manage admins

As Knox Asset Intelligence is part of Knox Suite, the process for adding and managing admins is the same for all Knox Suite products. You can manage Knox Asset Intelligence admins through the Knox Admin Portal’s common Administrators & Roles page. See the Knox Admin Portal’s documentation for additional details.

Manage roles

A Role is a set of permissions that you assign to an admin. By default, the main account holder that signed up for the Knox account is granted the Super admin role, which grants them full access to every feature in Knox Asset Intelligence and all other Knox cloud services.

Only one Super admin can exist for an account.

When you invite another admin to Knox Asset Intelligence, you can choose to either grant them one of the built-in roles (Viewer or Sub Admin), or create a new role that consists of custom permissions.

Here’s an explanation of the available role options:

Viewer — When assigned this pre-built role, the admin can view the dashboard, devices, licenses, and activity log pages, but all other pages and functions are disabled.
Sub Admin — When assigned this pre-built role, the admin can view all data and perform all functions that the Super admin can perform, including deleting other admins, however they cannot delete the Super admin.
Custom role — This role must be created in the console. When creating a custom role, you can specify which dashboard insights and pages, and which functions the admins have access to. You can more than one custom role in the system, but each role must have a unique name.

Create a custom role

To create a custom role for your Knox Asset Intelligence admins, do the following:

Click the Roles tab, then click CREATE ROLE near the top-right corner.
On the Create role page, select Knox Asset Intelligence in the Service field.
Give the role a unique name and option description.
In the right panel, assign your custom permissions for the role.

Configure role permissions

The following section describes each of the role permissions unique to Knox Asset Intelligence.

Data access

The Data access permission group controls access to certain dashboard insights and features. You must select at least one permission in this group. The following table describes each Data access permission and its affected dashboard insight or feature:

Permission	Description	Notes
Diagnostics	Admins can view the Diagnostics page.	If you also want to let admins request a log or snapshot, you must also grant permission for Devices and Uploads > Manage devices > Accept, reject, …request debug log….
Apps	Admins can view Apps dashboard insights.	If you also want to let admins show or hide dashboard insights and change data upload settings, you must also grant permission for Dashboard > Manage dashboard view and data collection.
Network	Admins can view Network dashboard insights.	If you also want to let admins show or hide dashboard insights and change data upload settings, you must also grant permission for Dashboard > Manage dashboard view and data collection.
Battery	Admins can view Battery dashboard insights.	If you also want to let admins show or hide dashboard insights and change data upload settings, you must also grant permission for Dashboard > Manage dashboard view and data collection.
Location	Admins can view the Location dashboard.	If you also want to let admins use the Find asset and Get latest location features, you must also grant permission for Dashboard > Manage dashboard view and data collection.
Security	Admins can view the Security center.	If enabled, admins can also show or hide the Security center in dashboard Settings > Customize tab.
System	Admins can view System insights like Storage, RAM, and CPU usage.	If you also want to let admins show or hide dashboard insights and change data upload settings, you must also grant permission for Dashboard > Manage dashboard view and data collection.
Miscellaneous	Admins can view the miscellaneous dashboard insights related to Knox Service Plugin.	If you also want to let admins show or hide these dashboard insights, you must also grant permission for Dashboard > Manage dashboard view and data collection.

Dashboard

The Dashboard permission group allows admins to control data collection rules and show or hide insights on the dashboard. The following table describes each permission:

Permission	Description
View only	Admins can only view the dashboard insights permitted in the Data access permissions group.
Manage dashboard view and data collection	Admins can show/hide dashboard insights and change data upload settings for all features in the Data access permission group.

Enabling the Manage dashboard view and data collection permission grants total control of data conditions and thresholds for dashboard insights, even if the admin doesn’t have access to an insight in the Data access permission. For example, if the admin does not have Network permission in Data access, granting this permission would still allow them to change data upload rules for network insights, like disabling the collection of Mobile/Wi-Fi data, even if they can’t view the actual network insight on the dashboard.

Devices and uploads

The Devices and uploads permission group allows admins to perform device actions and manage device groups. The following table describes each permission:

Permission	Description
View only	Admins can view the Devices page, but not take any actions.
Manage devices > Accept, reject, upload…	Admins can perform all available actions in the ACTIONS dropdown menu on the Devices page.
Manage devices > Delete devices	Admins can delete devices from the account.
Manage devices > Manage groups	Admins can create, edit, and delete device groups.

Licenses

The Licenses permission group allows admins to perform actions on the Licenses page. The following table describes each permission:

Permission	Description
View only	Admins can view the Licenses page, but not take any actions.
Manage devices > Manage licenses	Admins can perform all available actions in the ACTIONS dropdown menu on the Licenses page.
Manage devices > Delete devices	Admins can delete licenses from the account.

Activity log

This permission allows admins to view the Knox Asset Intelligence activity log.

Permission	Description
View activity log	Admins can view the Activity log page, but not take any actions.

Administrators and Roles

Permission	Description
Invite and manage administrators	Admins will have access to the Administrators page, allowing them to invite, deactivate, reactivate, and revoke other Knox Asset Intelligence admins. Note that an admin with this permission can the assigned roles for other admins. Practice caution when assigning this role.
Manage roles	Admins will have access to the Roles page, allowing them to create, edit, and delete other roles. Note that an admin with this permission can change their role to include other permissions that you may not have granted. Practice caution when assigning this role.

Reporting

Permission	Description
Manage reporting settings	Admins can modify the email alert settings for Knox Asset Intelligence in the Knox Admin Portal account Settings page.
Receive emails for company-level alerts	Admins can receive email alerts for company-wide events triggered whenever devices reach a dashboard reporting threshold. If you also configured a device group, assigned a group manager, and the group manager is the one receiving this permission, then they will receive threshold-triggered email alerts for the entire company, even if they are only managing a specific subset of devices in a group.

Permission

Description

Manage reporting settings

Admins can modify the email alert settings for Knox Asset Intelligence in the Knox Admin Portal account Settings page.

Receive emails for company-level alerts

Admins can receive email alerts for company-wide events triggered whenever devices reach a dashboard reporting threshold. If you also configured a device group, assigned a group manager, and the group manager is the one receiving this permission, then they will receive threshold-triggered email alerts for the entire company, even if they are only managing a specific subset of devices in a group.

Is this page helpful?