Who can do what?
In Clarios, two simple things decide what you can see and do:
- Your permission level: what you personally may do (this page).
- The approval: what Clarios may do in your environment at all. An administrator gives this once: Approval & Settings.
For most tasks you need both.
The permission levels
| Level | Who gets it | What you can do |
|---|---|---|
| Reader | default for everyone | View everything: dashboards, reports, the security check. |
| Writer | IT and security people | Like Reader, plus change: fix a security issue, set exceptions, save filters. |
| Admin | administrators | Like Writer, plus manage: the Admin Panel, device keys (BitLocker/LAPS), settings. |
| PartnerOperator | IT service providers (MSP) only | May switch into the environments of customers they look after. More: MSP & partners. |
ℹ️ No level assigned? Then you’re automatically a Reader and can view everything. You only need a higher level to change or manage.
Where the level is assigned
An administrator assigns levels in Microsoft 365 (Microsoft Entra). Go to Enterprise applications, then Clarios Signin, then Users and groups.
💡 Tip: A changed level only takes effect once the person signs out and back in.
🖼️ Screenshot: Microsoft Entra, the Clarios Signin application, Users and groups tab, with the level choices (Reader / Writer / Admin) shown while assigning.
Target file:
assets/getting-started/entra-role-assignment.png
Who may do which task? (quick overview)
| Task | Minimum level |
|---|---|
| View dashboards, create a PDF | Reader |
| Find stale devices | Writer |
| Set an exception | Writer |
| Fix a security issue | Writer |
| View device keys (BitLocker/LAPS) | Admin |
| Admin Panel: manage customers & areas | Admin |
| Switch into a customer | PartnerOperator |
What’s next?
- Approval & Settings: what Clarios may do in your environment.
- MSP & partners: for IT service providers.