# Create a MultiTenant User Role

## About this task

A Multitenant User Role is automatically copied into all existing subtenants as well as placed into a subtenant when created. Useful for providing a set of predefined roles a Customer can use. The Multitenant Locked option prevent subtenant from modifying FEATURE ACCESS settings in the Role. Note Group, Instance Type and Blueprint Access settings will still be editable as Groups are unique per Tenant, and Instance and Blueprints can be a mix of unique and shared items.

## Procedure

1. In the Master Account, navigate to Administration > Roles
2. Select + CREATE ROLE
3. Enter a name for the Role and optional Description
4. For TYPE, select “User Role”
5. Optionally select an existing Role to copy in the COPY FROM ROLE dropdown. \* This will configure the new Role with the same configuration as the selected role to copy. A new role that is not copied from another role will be generated with all permissions set to NONE.
6. Select the MULTITENANT ROLE checkbox
7. Optionally select the MULTITENANT LOCKED checkbox \* When enabled, the FEATURE ACCESS settings in the Role will not be editable by subtenants. Group, Instance Type and Blueprint Access settings will still be editable as Groups are unique per Tenant, and Instance and Blueprints can be a mix of unique and shared items.
8. Select SAVE CHANGES

## Results

After saving the Role will be created, and you will be redirected to the Roles Permissions settings.

IMPORTANT

Multitenant Roles still need to be configured/managed be each subtenant, as Groups are unique per Tenant, and Instance and Blueprints can be a mix of unique and shared items.

NOTE

User Roles cannot exceed Tenant Role permissions. If a Multitenant User Role has higher permissions than the Tenant Role assigned to a subtenant, the Multitenant User Role permissions in that Tenant will automatically be reduced to match the Tenant Role permissions.
