Manage admins and roles

The Reseller Portal can be managed by multiple admins. With role-based access control (RBAC), super admins responsible for account creation can invite other admins and assign to them the roles and permissions required to manage accounts. This ensures admins only have access to the functions they are responsible for managing.

To manage your admins and roles, navigate to the Administrators & Roles page of the Knox Reseller Portal.

Admins

The Administrators tab displays a list of all admins associated with your reseller account. The super admin, who created the account, is shown with a crown next to their name.

Invite an admin

You can invite individual users as admins. When you create an invite for an admin, you must also assign them a role.

To invite an admin:

1. On the ADMINISTRATORS tab, click INVITE ADMINISTRATOR.

2. Enter the following information:

   Component	Description
   First name	The admin's first name.
   Last name	The admin's last name.
   Email address	The admin's email address. This email must be associated with a Samsung account.
   Role	Select a role to assign to this new admin.

3. Click INVITE.

The newly invited admin displays on the ADMINISTRATORS tab with their role. You can filter the admin list by ROLE.

Manage an invitation

You may want to remind an admin to accept their invite, or cancel their invite. You can only manage invitations for admins with the Pending status. To resend or revoke an invitation:

1. On the ADMINISTRATORS tab, click the name of the admin. The Edit administrator page opens.

2. On the Edit administrator page, you can click:

   • RESEND INVITATION — Review the Resend invitation dialog, then click CONFIRM.

   • REVOKE INVITATION — Review the Revoke invitation dialog. To confirm this action, click REVOKE.

     The user won’t be notified of this action. When the user clicks the link in the invitation email, they won’t be granted access to Knox solutions or data.

Edit an admin

To edit an admin’s details:

1. Click the name of the admin you want to edit. The Edit administrator page opens.
2. Modify the admin’s first and last name, and their role, as required.
3. Click SAVE.

Deactivate an admin

If you want to prevent an admin from accessing the Knox Reseller Portal, you can deactivate their account, changing their status to Inactive. You can only deactivate admins with the Active status.

To deactivate an admin:

1. On the ADMINISTRATORS tab, click the name of the admin you want to deactivate. The Edit administrator page opens.
2. Click DEACTIVATE ACCOUNT. The Deactivate account dialog displays.
3. Click DEACTIVATE to confirm the change.

A deactivated admin won’t be able to access to the Knox Reseller Portal, but will remain in your account.

Roles

You can use the ROLES tab to view, create, and manage custom permissions for admins. Use the search bar to find roles by name.

Create a role

You can create a new role to define specific permissions. By default, new roles have the View only permission and can’t manage profiles, devices, licenses, or admins.

To create a new role:

1. On the ROLES tab, click CREATE ROLE.

   

2. Enter the following information:

   • Role name — Enter a unique name to help you identify the newly created role.

   • Description — (Optional) Enter a description for the role. A maximum of 200 characters is permitted.

3. Define the following permissions:

   Group	Permission
   Customers	View only Manage customers — The admin can add and edit customer configuration permissions.
   Devices	View only Manage customers (select at least one permission) Upload — The admin can upload devices to the Knox Reseller Portal. Delete — The admin can remove devices from the Knox Reseller Portal.
   Activity log	View activity log — If selected, allows the admin to view the Activity log page.
   Administrators and Roles	Invite and manage administrators — The admin can invite other admins to the Knox Reseller Portal. Manage roles — The admin can create and assign roles. The Manage roles permission allows admins to add and edit roles to include any permission, including ones they don't have.
   Knox Cloud APIs	Knox Cloud APIs — If selected, allows the admin to access the Knox Cloud APIs portal. This field is only available if a Samsung admin has enabled Knox Cloud APIs for your tenant.

4. Click SAVE.

Edit a role

To edit an existing role:

1. On the ROLES tab, click the ROLE NAME that you want to edit. The Edit role page opens.
2. Modify the role name, description, and permissions, as required.
3. Click SAVE.

Delete a role

You can choose to delete roles that you no longer need. You can only delete roles that aren’t associated with active admins.

To delete a role:

1. On the ROLES tab, click the ROLE NAME that you want to delete. The Edit role page opens.
2. Click DELETE to remove the role from the list and remove the associated permissions for all admins assigned to the role. This action can’t be undone.