Understanding Administrator Roles and Privileges

Administrator roles define the types of configuration, monitoring, and administration tasks that a user can perform in RUCKUS One.

An administrator role defines the types of tasks that an administrator can perform, such as:

  • Manage venues, networks, and network devices
  • Manage authentication services and guest users
  • Monitor wireless clients and events
  • View AI-analytics reports
The following table describes the administrator roles that RUCKUS One supports.
Note: You can assign the same administrator roles to multiple users.
Table 1. User Roles in RUCKUS One
Administrator Role Description
Prime Admin The highest-level administrator role in RUCKUS One. This role allows administrators to perform all configuration, monitoring, and administration tasks in your RUCKUS One account.
Administrator This role allows administrators to fully control tenant accounts and to manage delegated tenants, if permitted by the Prime Admin.
Guest Manager This role allows administrators to manage Portal services that control Wi-Fi client access to Guest Pass captive portal networks. The tasks that administrators assigned the guest manager role can perform include:
  • Adding a new guest user
  • Managing existing guest users, including disabling or deleting guest users and generating a new guest password
  • Viewing guest user information
Read Only This role allows administrators to view venues, APs, networks, switches, Guest access control, events, and reports. However, an administrator that is assigned this role cannot perform any creation, configuration, or management tasks in RUCKUS One.
DPSK Manager A DPSK Manager is an administrative user whose sole responsibility is creating, disseminating, and managing Dynamic Pre-Shared Keys. Similar to the Guest Manager role, this user can only interact with DPSK-related services.

If a third-party administrator (an authorized RUCKUS partner, also known as a value-added reseller or VAR) is assigned as a Prime administrator, additional VAR administrators automatically get read-only access to the VAR portal. Any further permissions must be explicitly granted by the Prime administrator.