Advanced Roles allows Admin users to create up to ten (10) custom roles within the Aurora app. 

Note: Advanced Roles is available on all Business Plans (Build, Grow and Scale), and as an add-on to Custom Plans. To get access to Advanced Roles, reach out to your Customer Success Manager or Engagement Manager.

In this article, we’ll cover:

• Creating and Editing Advanced Roles
• Frequently Asked Questions

Creating and Editing Advanced Roles

Available under the Settings page in the Aurora application, navigate to the “Roles” tab to create, manage, and delete Roles in Aurora. 

Up to ten (10) Advanced Roles may be created. To create a new Advanced Role, follow these steps:

1. Click “+ New Role” on the Settings > Roles page
2. Enter a Role name
3. Configure permissions:
   • Project & user access - Represents the global level of access for managing projects, users, and teams in your organization and partners. Once an access level is chosen for an Advanced Role, it cannot be changed
     • Assigned only - Users in this role can only edit projects assigned to them, and cannot view or manage other users in their teams
     • Assigned and Team-enabled - Users in this role can edit projects that are assigned to them and other projects on their teams, and can view other users on their teams but cannot manage them (Learn more about Teams here.)
     • Partner-enabled - Users in this role can edit projects, and view and manage other users, across all teams within their partner organization
       • Available only if Partner(s) have been created via Partner Management
   • Project content
     • Pricing - This setting controls the ability to edit pricing for projects. When turned off, this setting restricts users from adjusting pricing by creating a read only experience in both Sales Mode and Design Mode. Fields that cannot be edited include: price per watt, flat price, incentives, adders, and discounts
     • Financing settings - This setting controls the ability to edit financing settings for individual designs when opened by the user in Sales Mode or Design Mode
     • Design Mode - This setting controls access to designs in Design Mode. When turned off, this setting hides Design Mode from users, and users can only view designs within Sales Mode.
       • Edit site model - For roles with access to Design Mode, this setting enables admins to restrict users from editing the site model within Design Mode.
     • Sales Mode site and system design - This setting controls the ability to edit designs from within Sales Mode. When turned off, this setting prevents the user from running Aurora AI (if purchased), requesting an expert model, adding or removing panels and ground mounts, editing panel and ground mount type, and toggling panels. 
       • Note: Even with this turned off, users can view any 3D models added to the proposal template and can toggle their layer visibility, zoom, and angle.
   • Database
     • Proposal templates - This setting controls the ability to create new proposal templates and to edit those templates when disabled. It does not include the ability to enable and disable proposal templates; only the account admin can take those actions.
   • Settings
     • User management - This section includes User management pages: Users and Licenses, Roles, and Teams pages.
       
       
4. Click “Save.”

After you’ve created an Advanced Role, you can Edit or Delete the role from the Roles page. You can only delete an Advanced Role when no user is assigned to that role.

Frequently Asked Questions

How do I create a Partner Admin — someone to manage only one Partner organization in my tenant?

Tenant Admins can use Advanced Roles to create Partner Admins by selecting the Partner-enabled as the Project & user access type. Read more about Partner Admins here.

Is Advanced Roles supported by the API?
Yes, Advanced Roles is supported by the Sync API; users must be on version 2022.09 or later of the API to access API support for Advanced Roles.

Please review the Users API documentation to learn more.

What if I use Secure Mode?

Secure Mode is a setting supported for Limited Team Member roles; when enabled, Limited Team Members will be restricted from editing site models. In order to activate Secure Mode for Limited Team Members, leave the Edit box for Site model unchecked. To give Limited Team Members the ability to edit Site models, click to add a check in the Edit box.

While Secure Mode still applies to the standard role of Limited Team Members, we recommend configuring a new Advanced Role that restricts site modeling moving forward.

If I update the permissions on an Advanced Role, will all of the users assigned to that role automatically receive the updated permissions?

Yes. When you update the access and permissions settings for an Advanced Role, simply save and refresh your browser to apply the new permissions.

How does Advanced Roles work if I’m using legacy Aurora?

Advanced Roles is supported in new Aurora only, and users should not access legacy Aurora. If a user with an Advanced Role accesses legacy Aurora, the user behavior will be of a Team Member with some properties carrying over from new Aurora:

• Project visibility:
  • All projects -
    1. can view all projects
    2. can assign an unassigned project to any user only once
    3. can also assign an unassigned project to self only once
  • Assigned projects only -
    1. can only view their own projects
    2. Reassign their own projects