Flexera One Roles

Full access to approve remediation actions for policy incidents, but this role doesn't configure the policies.

Full access to control which policies are applied to the scopes they have access to and how those policies behave.

Full access to manage bill adjustments in Cloud Cost Optimization.

Full access to configure Billing Centers and management of user access to Billing Centers. Full read access except to Bill Adjustments and registration of billing data.

Full access to all features and functionality in Cloud Cost Optimization. This includes the ability to manage user access to Billing Centers, register new billing data (such as AWS), configure Billing Centers, Bill Adjustments, custom dimensions, recommendations, currency, and organization dashboards.

Full access to manage rule-based dimensions in Cloud Cost Optimization.

Ability to view bill adjustments (read-only access) in Cloud Cost Optimization.

Full access to user specific dashboards. Read-only access to Cloud billing data, Organization dashboards, recommendations, and reserved instances. Administrators can limit access to specific Billing Centers.

Full access to configure billing data in Cloud License Management.

Note:This role is limited to operators who have the Manage organization role access.

Full access to manage rule-based dimensions in Cloud License Management.

Full management functionality for custom report creation in Power BI.

Gives permission to delete external inventory connections in IT Visibility.

Full access to all SaaS features and functionality. This includes the ability to read, create new, edit, and delete where applicable. If a user has the Administer SaaS role, it is not necessary to assign any other role to the user with respect to SaaS functionality.

Read and edit access to create and manage SaaS import jobs using an API. Administrators should assign SaaS import job service accounts to this role.

Full access to manage unsanctioned applications. In addition, this role has read-only access to the SaaS applications, team members list, and audit logs. Users with this role cannot view the SaaS dashboard.

Access to IT Asset Management including the ability to call all Flexera REST API endpoints. This Flexera One role provides access to the IT Asset Management Application only. To use IT Asset Management, a Flexera One user must also have a corresponding account in IT Asset Management (where more granular IT Asset Management-specific authorizations are granted). For more information, see Managing IT Asset Management Accounts.

Read-only access to IT Visibility Data Exports.

Full access to IT Visibility Connections, which is required to create a connection.

Within IT Visibility, this role gives full access to Data Explorer to create and save insights.

Ability to access Technopedia datasets via APIs.

Access to the Administration section of Flexera One where the role can be used to invite users, manage user roles, setup single sign-on, and so on. The Administer organization role cannot grant the Manage organization role.

Admin-level access (including all Create, Replace, Update, and Delete operations) on cloud resources, which includes credentials, plugins, and registrations. In addition, this role gives read-only access to the cloud resources in IT Visibility.

Access to all functionality that manages SBOMs, including managing buckets, parts, SBOMs, and jobs.

Access to retrieve data from the SBOM Data Library for component, license, and security vulnerability lookups.

End User privileges in Self-Service to view the Catalog and CloudApps and can launch and manage CloudApps. Users with this role are the primary consumers of Self-Service.

Ability to access the data explorer to create and save insights and custom dashboards, copy and edit out-of-the-box dashboards, as well as upload custom data mashups.