Risk360's role-based administration enables you to control what different admins can do in the Risk360 Admin Portal. You can delegate responsibilities among admins and granularly control their level of access to the Risk360 Admin Portal to ensure they do not create conflicting settings.

To facilitate role-based administration, each admin account comprises a role and scope:

• Using an admin role you can specify which features admins can access in the Risk360 Admin Portal.
• Using an admin scope, you can specify which areas of the organization (e.g., which departments or which locations) admins can configure admins or settings in the Risk360 Admin Portal.

Zscaler provides a default admin account, full access to the Risk360 Admin Portal, and scope. As a default admin, you can:

• Enable or disable the default admin account status, but you cannot delete the account.
• Add as many additional admins as necessary to meet the specific needs of your organization (only with role-based administration).
• Edit and delete admins as necessary at any time.

If you are subscribed to the ZIdentity service, the admins in the Risk360 Administrators page are listed as read-only. These admins are configured in the ZIdentity Admin Portal. To learn more, see What Is ZIdentity?

About the Administrators Page

On the Administrators page (Administration > Administration Management > Administrators), you can do the following:

1. Add an admin.
2. Search for a configured admin.
3. View a list of all admins for the Risk360 Admin Portal. For each admin, you can see the following information:
   • Login ID: The Risk360 Admin Portal login ID for the admin.
   • Name: The name of the admin.
   • Role: The admin's level of access to the Risk360 Admin Portal.
   • Status: The status of the admin (Enabled or Disabled).
   • Scope: The areas of the organization the admin can manage in the Risk360 Admin Portal.
   • Login Type: Lists if SAML single sign-on (SSO) login, direct password access login, or both are enabled for the admin.
   • Comments: Displays any comments regarding the admin, if available.
   • Password Expired: Displays whether the admin's password has expired if password expiration is enabled for admins.
   • Type: Displays the admin type. Currently, there is only one admin type for the Risk360 Admin Portal.
4. Modify the table and its columns.
5. View admin configuration details. Applicable only to the default admin account.
6. Edit or delete a configured admin.
7. Go to the Administrator Management page.