Roles and privileges

Roles group related privileges to define what users can do in Perfecto. Each role grants specific capabilities, as described below. Assigning the right role ensures users have the appropriate level of access for their responsibilities. To learn more, see Manage user permissions.

As a best practice, for enterprise environments, consider managing roles through your external IdP. Local role management is intended for small clouds only. If SSO is enabled, IdP rules override local permissions. To learn more about IdP configuration, see Federated SSO for external IdP.

The following roles are available:

  • No role assigned (default):

    • Can perform mobile/web automation and manual testing using devices in assigned device groups

    • Can view all reports and executions

    • Can stops own executions

  • Administrator: Can perform most administrative operations, excluding device lab management

  • Handset viewer:

    • Can perform mobile/web automation and manual testing using devices in assigned device groups

    • Can view all reports and live executions

    • Can stop all executions

  • Lab administrator:

    • Can manage Perfecto device groups

      To limit the lab admin’s permissions to specific device groups, select the relevant device groups.

      If a lab admin is assigned to specific device groups, they can modify user membership only in those groups. They cannot modify a user's membership in device groups outside their assigned scope.

      If you don’t select any device groups, the lab admin can manage all devices.

    • Can create, edit, and delete device groups

    • Can add and remove users and permitted devices

What's next