Administrator roles and permissions

Each administrator in HP Insights has one role. The role decides which parts of the web console they can see and what they can do there. HP Insights has six built-in roles, each with a fixed set of permissions.

The roles

Role	Who it's for
System Administrator	People who manage users and change the configuration. They can access most of the web console. Give this role to only a few people.
IT Administrator	People who manage users and their roles, deploy Scouts, and manage Fleet Analytics and Print Analytics. The same as System Administrator, except that they can't delete a Device Scout.
Business Manager	People who plan the business side of printing. They can see all print data in Fleet Analytics and Print Analytics, with limited ability to manage the system.
Print Analyst	People who analyze printing without needing to know who printed. They see all print data, but no user names in Print Analytics, and can't manage the system.
Fleet Monitor	People who look after the printers day to day. They can see printer data, but not Print Analytics, and can't manage the system.
Print Administrator	People who manage the printers in their assigned Device Groups. The role sets what they can do, and their Device Groups set which printers they can do it to. Available in every account from version 4.6. See How Device Groups limit administrator access to printers.

Permissions by role

Edit means the role can view and change the setting. View means it can only view it. A blank cell means the role doesn't have the permission.

Permission	System Administrator	IT Administrator	Business Manager	Print Analyst	Fleet Monitor	Print Administrator
Account administration
Create, invite, edit and delete users (Account Settings > Access)	Yes	Yes				Delete users only
Assign roles to users	Yes	Yes
View roles			Yes			Yes
Override default device costs	Yes	Yes	Yes
Single sign-on configuration	Edit	Edit	Edit	View	View
Policies (Account Settings > Policy)	Edit	Edit	Edit	View	View
Data privacy (Account Settings > Data Privacy)	Edit	Edit	Edit	View, including data privacy regions
Account Settings > Settings	Yes	Yes
Account Settings > Theme (needs a Secure Print license)	Yes	Yes
Manage the account						Yes
Print Scout
Create, download and configure	Yes	Yes				Download the installer only
View installed Print Scouts			Yes
Device Scout
Create, download and configure	Yes	Yes
Delete	Yes					Yes
View installed Device Scouts			Yes
Fleet Analytics
View information and generate reports	Yes	Yes	Yes	Yes	Yes
Edit and export information	Yes	Yes	Yes
Set printers as in or out of service	Yes	Yes
Export meter data (Analysis)	Yes	Yes
Print Analytics
View and explore print data	Yes	Yes	Yes	Yes, without user names
Set business targets for dashboard metrics	Yes	Yes	Yes
Export the monthly CSV file (needs a full month of data)	Yes	Yes	Yes
Import and manage print users			Yes
Create reports						Yes
Secure Print
View and explore Secure Print data	Yes	Yes	Yes	Yes
Secure printers, generate QR code labels, and set printer credentials	Yes	Yes
Use the Reset button on Secure Printers	Yes	Yes
View the Secure Printers list			Yes	Yes
View the Print Scout list	Yes	Yes	Yes
Secure Print settings	Edit	Edit	View	View
Secure Scan settings (Secure > Settings)	Edit	Edit	View	View
User Portal settings	Edit	Edit	View	View
Invite guests, Chromebook users and Secure Print Direct users	Yes	Yes	Yes	Yes
Configure Universal Print integration	Yes	Yes
Settings Advanced menu and Secure > Advanced (Cloud Connector logs, user registration)	Yes	Yes
Remove Secure Print configuration						Yes
Secure Print Direct
Import printers and invite Secure Print Direct users	Yes	Yes	Yes
View the Print Scout list	Yes	Yes	Yes
Configure Secure Print Direct settings	Yes	Yes
Configure user and group synchronization (SCIM 2.0)	Yes	Yes
View, update and delete locations, printers and queues	Yes	Yes

Change an administrator's role

You need the System Administrator role to change another administrator's role. They don't need a new invitation: the new role applies the next time they sign in.