> ## Documentation Index
> Fetch the complete documentation index at: https://docs.m1amdocs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Admin Roles

Roles control a user's access level to specific resources and services to prevent unauthorized access. By using roles, you decide what your users access and what actions they're allowed to do on the requested resource, such as viewing a page. Roles are often based on criteria such as the user's job or function.

An initial role is selected when a new user is added, and the role can updated later if required. Storefront Gateway supports the following types of roles:

**Super Admin** can use both the Admin and Care consoles and has full access to perform the following tasks:

* [Create OIDC](registeringClients_t_NEW) clients (RPs) for Single Sign-On.
* [Set up integrations](socialConnectionsSettings_r) with supported social identify providers (Facebook, Google, etc.).
* Manage [application settings](appSettings) including password settings, multi-factor authentication, email/mobile formats, and other related security settings.
* [Admin User Management](adminConTeamMember) options to suspend/remove suspension and deactivate users.

A **Care Representative** can access the Care and Admin consoles and perform the following tasks:

* Create [new users](../../sgCareGuide/topics/sgCareNewUser) except Super Admins.
* View and modify [Care Console **Identity**](../../sgCareGuide/topics/careAboutUserIdentity) settings (including password reset and profile changes), [**Digital Subscriptions**](../../sgCareGuide/topics/careAboutUserIdentity), and [**User Activity**](../../sgCareGuide/topics/careAboutUserIdentity#image_sts_s5m_trb).
* User management functions to unlock, suspend/remove suspension, deactivate all users except Super Admins.

Custom roles can be added to the Admin console. To request a custom role, contact your Storefront Gateway representative.

**Use Case Examples**

Some common use cases for your organization may be:

* A Super Admin adds a new admin user to the team from the **Admin** console. The Super Admin selects the Care Representative role, and an invitation email is sent to that specific new admin user. Upon successful verification and authentication of the new admin user (care representative), they have full access to the **Care** console for user management.
* Super Admin can view, list and manage an admin user's status from the Admin Console. An example is when the Super Admin searches for and updates a Care Representative's a role to Super Admin, thereby granting them full access to both the **Admin** and **Care**are consoles.

Organizations can manage personal identifiable information (PII) such as identity data, billing subscriptions, or financial records, with a strong security implementation using role assignments. Roles ensure that only the users with the appropriate privileges can access and perform actions on specific resources and services.

* **[Admin Roles Details](adminRoles#admin-roles-details)**

**Parent topic:**[Admin User Management](adminUserMGMT)

## Admin Roles Details

The following Storefront Gateway Admin roles are available for assignment when creating a new user:

| User Role | Description |
| - | - |
| **Super Admin** | The Super Admin role has permission to access both the Admin and Care consoles. This admin user manages the Connect services, resources, and can view/modify accounts from either console. The Super Admin role can create admin users and assign the Care Representative role to other users. |
| **Care Representative** | The Care Representative role has permission to access both the Admin and Care consoles. However, the Care Representative's access to the Admin console is limited to the User Management section. This admin user can view end users' identities and manage services in order to answer their queries. |

**Parent topic:**[Admin Roles](adminRoles)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.