Digital Experience Monitoring roles are used by admins to create levels of permissions for other admin users within an organization. To learn more, see About Digital Experience Monitoring Role-Based Administration.

To add a Digital Experience Monitoring role:

1. Go to Administration > Admin Management > Role Based Access Control > Digital Experience.

2. Click Add ZDX Role.

   The Add ZDX Role window appears.

3. In the Add ZDX Role window:
   • Name: Enter a name for the role.
   • Permissions: Select the permissions for the administrator role:
     • Dashboard Access

       Choose one of the following permissions for access to the predefined dashboards and overviews:

       • View Only: Allows admins to view all dashboards and overviews.
       • None: Does not allow admins access to dashboards and overviews.
       • Custom: Allows admins to view specific dashboards or overviews.

       If the Dashboard permission setting is set to View Only or the UCaaS permission setting is set to View Only or Full, you can view the Digital Experience Monitoring Dashboard and applications.

       For Custom, choose to give the following specified permissions for access to specific dashboards or overviews:

       • Digital Experience Monitoring Dashboard

         Choose one of the following permissions for access to the Performance Dashboard:

         • View Only: Allows admins to view the Performance Dashboard.
         • None: Does not allow admins access to the Performance Dashboard.

         Close
       • Application Overview

         Choose one of the following permissions for access to the Applications Overview:

         • View Only: Allows admins to view the Applications Overview.
         • None: Does not allow admins access to the Applications Overview.

         Close
       • Application Dashboard

         Choose one of the following permissions for access to the Application Details:

         • View Only: Allows admins to view the Application Details.
         • None: Does not allow admins access to the Application Details.

         Close
       • User Overview

         Choose one of the following permissions for access to the Users Overview:

         • View Only: Allows admins to view the Users Overview.
         • None: Does not allow admins access to the Users Overview.

         Close
       • User Dashboard

         Choose one of the following permissions for access to the User Details:

         • View Only: Allows admins to view the User Details.
         • None: Does not allow admins access to the User Details.

         Close
       • Incident Dashboard

         Choose one of the following permissions for access to the Incidents Dashboard:

         • View Only: Allows admins to view the Incidents Dashboard.
         • None: Does not allow admins access to the Incidents Dashboard.

         Close
       • Wi-Fi Dashboard

         Choose one of the following permissions for access to the Wi-Fi Dashboard:

         • View Only: Allows admins to view the Wi-Fi Dashboard.
         • None: Does not allow admins access to the Wi-Fi Dashboard.

         To learn more, see Monitoring the Wi-Fi Dashboard.

         Close

       Close
     • Device and User Information

       Choose one of the following permissions for access to the device and user information:

       • Visible: Allows admins to view device and user information.
       • Obfuscated: Does not allow admins to view device and user information.
       • Custom: Allows admins to view specific device and user information.

       For Custom, choose to give the following specified permissions for access to User Name, Location, Device Name, or IP Address:

       • User Name

         Choose one of the following permissions for access to view the user name:

         • Visible: Allows admins to view the user name.
         • Obfuscated: Does not allow admins to view the user name.

         If the User Name permission is set to Visible, then an admin has access to User Search and the ability to download a table in CSV format for Software Inventory. If the User Name permission is set to Obfuscated, then the admin does not have access to User Search and cannot download a table in CSV format for Software Inventory.

         Close
       • Location

         Choose one of the following permissions for access to the user location:

         • Visible: Allows admins to view the user location.
         • Obfuscated: Does not allow admins to view the user location.

         Location obfuscation occurs on User Overview and User Dashboard pages only.

         Close
       • Device Name

         Choose one of the following permissions for access to the device name:

         • Visible: Allows admins to view the device name.
         • Obfuscated: Does not allow admins to view the device name.

         If the Device Name permission is set to Visible, then an admin has the ability to download a table in CSV format for Software Inventory. If the Device Name permission is set to Obfuscated, then the admin cannot download a table in CSV format for Software Inventory.

         Close
       • IP Address

         Choose one of the following permissions for access to the device IP Address:

         • Visible: Allows admins to view the device IP Address.
         • Obfuscated: Does not allow admins to view the device IP Address.

         Close
       • Wi-Fi Name

         Choose one of the following permissions for access to the device Wi-Fi names:

         • Visible: Allows admins to view the device Wi-Fi names.
         • Obfuscated: Does not allow admins to view the device Wi-Fi names.

         Close

       If Zscaler Client Connector's Collect Machine Hostname Information or Collect Device Owner Information is disabled, then Digital Experience Monitoring obfuscates BSSID, SSID, Device Name, and hostname. To learn more, see About User Privacy.

       Close
     • UCaaS Monitoring

       Choose one of the following permissions for access to UCaaS Monitoring:

       • Full: Allows admins to manage and view Call Quality applications and Call Quality Meetings pages.
       • View Only: Allows admins to view Call Quality applications and Call Quality Meetings pages, but not manage them.
       • None: Does not allow admins to manage or view Call Quality applications or Call Quality Meetings pages.
       • Custom: Allows admins to manage and view specific Call Quality applications and Call Quality Meetings pages.

       If the Dashboard permission setting is set to View Only or the UCaaS permission setting is set to View Only or Full, you can view the Digital Experience Monitoring Dashboard and applications.

       For Custom, choose to give the following specified permissions for access to manage or view specific Call Quality Applications and Call Quality Meetings pages:

       • Call Quality Configuration

         Choose one of the following permissions for access to Call Quality Configuration pages:

         • Full: Allows admins to manage and view Call Quality Configuration pages.
         • View Only: Allows admins to view Call Quality Configuration pages, but not manage them.
         • None: Does not allow admins to manage or view Call Quality Configuration pages.

         Close
       • Call Quality Meetings

         Choose one of the following permissions for access to Call Quality Meeting pages:

         • Full: Allows admins to manage and view Call Quality Meetings pages.
         • View Only: Allows admins to view Call Quality Meetings pages, but not manage them.
         • None: Does not allow admins to manage or view Call Quality Meetings pages.

         Close
       • Call Quality Applications

         Choose one of the following permissions for access to Call Quality Applications pages:

         • Full: Allows admins to manage and view Call Quality Applications pages.
         • View Only: Allows admins to view Call Quality Applications pages, but not manage them.
         • None: Does not allow admins to manage or view Call Quality Applications pages.

         Close

       Close
     • Analytics

       Choose one of the following permissions for access to Analytics:

       • Full or View Only: Allows admins to view Analytics pages, but not manage them.
       • None: Does not allow admins to manage or view Analytics pages.
       • Custom: Allows admins to manage and view specific Analytics pages.

       For Custom, choose to give the following specified permissions for access to manage or view specific Analytics pages:

       • QBR

         Choose one of the following permissions for access to view the Quarterly Business Review (QBR) page:

         • Full or View Only: Allows admins to view the QBR page, but not manage it.
         • None: Does not allow admins to manage or view the QBR page.

         Close
       • System Generated Reports

         Choose one of the following permissions for access to view the System-Generated Reports page:

         • Full or View Only: Allows admins to view the System-Generated Reports page, but not manage them.
         • None: Does not allow admins to manage or view the System-Generated Reports page.

         Close
       • Snapshots

         Choose one of the following permissions for access to the Snapshots page:

         • Full: Allows admins to manage the Snapshots page.
         • View Only: Allows admins to view the Snapshots page.
         • None: Does not allow admins to manage or view the Snapshots page.

         Close

       Close
     • Configuration Access

       Choose one of the following permissions for access to the Applications and Probes configuration:

       • Full: Allows admins full access to Configuration Access.
       • View Only: Allows admins to view what has been set up in Configuration Access.
       • None: Does not allow admins to have access to Configuration Access.

       Configuration Access is not accessible to the admins when the User Name permission is set to Obfuscated.

       If the Configuration Access permission setting is set to Full, you can enable data collection for Software and Device Inventory on the Inventory Settings page. To learn more, see Configuring Inventory Settings.

       Close
     • Administrator Management

       Choose one of the following permissions for access to Administrator Management, Role Management, Location Management, and Audit Logs:

       Although roles are created in Role Management, they are managed by Super Admins.

       • Full: Allows admins full access to Administrator Management.
       • View Only: Allows admins to view what has been set up in Administrator Management.
       • None: Does not allow admins to have access to Administrator Management.

       Close
     • Locations

       Choose one of the following permissions for access to Zscaler locations:

       • View Only: Allows admins to view Locations.
       • None: Does not allow admins to view Locations.

       Close
     • User Management

       Choose one of the following permissions for access to Users, Groups, and Departments in User Management:

       • View Only: Allows admins to view what has been set up in User Management.
       • None: Does not allow admins to view the User Management setup.

       Close
     • Remote Assistance Management

       Choose one of the following permissions for access to Remote Assistance:

       • Full: Allows admins to have full access to Remote Assistance Management.
       • View Only: Allows admins to view what has been set up in Remote Assistance Management.
       • None: Does not allow admins access to Remote Assistance Management.

       Close
     • Wi-Fi Dashboard

       Choose one of the following permissions for access to the Wi-Fi Dashboard:

       • Full: Allows admins to have full access to the Wi-Fi Dashboard.
       • View Only: Allows admins to view the Wi-Fi Dashboard.
       • None: Does not allow admins access to the Wi-Fi Dashboard.

       Close
     • Diagnostics

       Choose one of the following permissions for access to Diagnostics:

       • Full: Allows admins to manage and view Diagnostics sessions, and also view and export the results.
       • View Only: Allows admins to view details of Diagnostics sessions, but not export the results.
       • None: Does not allow admins to manage or view Diagnostics sessions or results.

       If you User Name and Device Information are set to Obfuscated, then Diagnostics is not accessible.

       Close
     • Alerts

       Choose one of the following permissions for access to Alerts:

       • Full: Allows admins to configure and view alerts, and also receive alert notifications.
       • View Only: Allows admins to view alerts and receive alert notifications, depending on rule configuration.
       • None: Does not allow admins to manage or view alerts, nor receive alert notifications.

       If you have the Full permission for Alerts, you can assign labels to an alert rule. To learn more, see Configuring an Alert Rule.

       Close
     • Webhooks

       Choose one of the following permissions for access to Webhooks:

       • Full: Allows admins to create, manage, and view webhooks.
       • View Only: Allows admins to view webhooks.
       • None: Does not allow admins to manage or view webhooks.

       Close
     • Copilot

       Choose one of the following permissions for access to the ZDX Copilot page:

       • Full: Allows admins to access and use the ZDX Copilot page.
       • View Only: Allows admins to view the ZDX Copilot page.
       • None: Does not allow admins access to the ZDX Copilot page.

       Close
     • Zscaler Client Connector features in Admin Portal

       Choose one of the following permissions for access to Client Connector features in the Admin Portal:

       • Full: Allows admins full access to manage the Admin Portal.
       • View Only: Allows admins to view the current setup in the Admin Portal.
       • None: Does not allow admins access to the Admin Portal.

       Close
     • Time Duration

       Choose one of the following time durations for the Digital Experience Monitoring Role:

       • 2 hours
       • 4 hours
       • 6 hours
       • 12 hours
       • 24 hours
       • 48 hours
       • Full Access

       The default is set to Full Access.

       Close
     • Inventory Management

       Choose one of the following permissions for access to Inventory Management pages:

       • Full: Allows admins full access to Inventory Management pages.
       • View Only: Allows admins to view the current setup on the Inventory Management pages, but not manage them.
       • None: Does not allow admins access to Inventory Management pages.

       Inventory Management includes the Software, Hardware, and Process Settings pages.

       Close
     • Self Service IT

       Choose one of the following permissions for access to Self Service:

       • Full: Allows admins to manage Self Service notifications for users and access to the Self Service dashboard.
       • View Only: Allows admins to view the Self Service dashboard, but not manage Self Service notifications.
       • None: Does not allow admins to manage Self Service notifications or view the Self Service dashboard.

       Close
4. Click Save and activate the changes.