# Admin Console Roles

Your Sudo Platform account provides two levels of administrative controls within the Admin Console, each of which can be independently assigned to any account user, based on your business needs:

1. Account-level administration
2. Project-level administration

## Account-Level Administration

### **Account Admin Role**

An account user granted the *Account Admin* role has the ability to create, update, and delete any account user, including assigning project-level roles, such as *Project Administrator*, *Developer*, etc. An Account Admin does not automatically inherit any project-level admin roles.

## Project-level Administration

The roles that govern project-level administration allow your organization to follow the standard security practice of granting *least privilege* to your account users on a project-by-project basis. For example, if you have *development*, *integration,* and *production* projects, it might be applicable to grant the *Developer* role to a wider group of account users for the *development* project than for the *production* project.

### **Project Administrator Role**

An account user granted the *Project Administrator* role is able to see every page in the Admin Console and utilize every feature available for the project to which it is assigned. This role does not allow the user to create, update, or delete account users nor modify account users' roles.

### **Developer**

An account user granted the *Developer* role is able to perform development-related features for a project such as:

* Download the project's SDK Config
* Manage their own Test Registration Keys
* Manage their own Android signing cert fingerprints
* Manage iOS DeviceCheck keys

### **Support**

An account user granted the *Support* role is able to perform to support-related features and capabilities for a project such as troubleshooting user registration issues.

### **Finance**

An account user granted the *Finance* role is able to access billing and reporting features for a project.

### **Marketing**

An account user granted the *Marketing* role is able to access product dashboards and other marketing-related reporting features for a project.

### **Project Roles Overview**

| Capability                              | Account Admin | Project Admin | Developer | Support | Finance | Marketing |
| --------------------------------------- | :-----------: | :-----------: | :-------: | :-----: | :-----: | :-------: |
| **Manage Account Users**                |       ✅       |               |           |         |         |           |
| **Grant Account Roles**                 |       ✅       |               |           |         |         |           |
| **Grant Project Roles**                 |       ✅       |               |           |         |         |           |
| **Edit Own Profile**                    |       ✅       |       ✅       |     ✅     |    ✅    |    ✅    |     ✅     |
| **Download SDK Config**                 |               |       ✅       |     ✅     |         |         |           |
| **Manage DeviceCheck Keys**             |               |       ✅       |     ✅     |         |         |           |
| **Manage Others Test Registration Key** |               |       ✅       |           |         |         |           |
| **Manage Own Test Registration Key**    |               |       ✅       |     ✅     |         |         |           |
| **Search Device by Vendor ID**          |               |       ✅       |           |    ✅    |         |           |
| **Whitelist a Device**                  |               |       ✅       |           |    ✅    |         |           |