Skip to main content

Manage Service Provider Roles

An administrator becomes a Service Provider by being assigned a Service Provider role. Only Service Providers with a Super Account Manager role can view and manage the Service Provider roles assigned to users on their account.

There are nine types of Service Provider roles:

Super Account Manager​

Users with this role have full access to the Service Provider portal. Super Account Managers oversee support operations, manage administrators, reset configurations, generate usage reports, and facilitate support interactions. Central Support Issuance Administrators have visibility into all Issuance Support users and comprehensive access to administrative functions. Super Account Managers can perform all the tasks assigned to On-boarding Administrators as well as:

  • Make changes to Service Provider settings.
  • Manage the Service Provider roles assigned to other users.
  • Remove Tenant accounts (this applies to regular Tenants only. Service Provider Tenants cannot be removed)
  • Unlock the administrators of a Tenant

Note: Support Account Managers must add a tenant with either the Basic or Enhanced Issuance Support roles to access features of the Tenants page in Instant ID as a Service.

Account Manager Auditor​

Users with this role have view-only access to the Service Provider portal. Auditors cannot make any changes to Service Provider settings.

On-Boarding Administrator​

Users with this role can do the following:

  • View, create, lock and unlock Tenant accounts
  • Promote Tenants to Service Providers
  • Set and view entitlements

Entitlement Administrator​

Users with this role can do the following:

  • View Tenants
  • View Tenant entitlements
  • Set Tenant entitlements

Basic Issuance Support Role​

Created and modified by Managed Service Providers (MSPs), this role handles foundational support tasks, managing user authenticators, resetting configurations, viewing credential and enrollment designs, and overseeing basic printer operations. They can manage other Basic Issuance Support roles but cannot promote users to Enhanced Issuance Support.

Enhanced Issuance Support Role​

Created and modified by MSPs, this role manages both Basic and Enhanced Issuance Support roles, edits and creates credential and enrollment designs, and has full access to printer operations and configurations. They also oversee user authenticator management and have broader access to administrative areas.

Note: More Service Provider roles exist, such as Issuance Administrator, Issuance Operator, Issuance Designer, Issuance Student, Issuance Supervisor. For more information on the permissions of these roles, visit the Instant ID as a Service Roles List under Administration>Members>Roles.