User roles and permissions These are the predefined roles and the permissions for your organization. You can also use these permissions when you create a new role or change a role’s permissions. Predefined roles By default, the following roles are predefined and cannot be changed: Organization Owner The owner of the Kobiton account is given all user permissions. This role can only be transferred to another user by the current Organization Owner. ADMIN The ADMIN role must be assigned by the Organization Owner or another ADMIN. ADMINs are given all user permissions. MEMBER Every user invited to your organization is assigned the MEMBER role and given the following permissions: system.login system.logout app_repo.view_all_application Permissions system.login Allows a user to log in to Kobiton. Always required. system.logout Allows a user to log out of Kobiton. Always required. app_repo.delete_other_application Allows a user to delete public apps in the app repository. If app_repo.view_all_application is assigned, the user can also delete private apps. app_repo.view_all_application Allows a user to view all apps in the app repository, including private and locked apps. app_repo.upload_application Allows a user to upload and rename any apps they previously uploaded. device.custom_device_name Allows a user to create custom device names. device.tag_devices Allows a user to create device tags. org_management.modify Allows a user to manage all teams, roles, users, and device bundles. org_setting.modify Allows a user to manage all organization settings, including cleanup policies, integrations, configurations, and more. org_setting.modify_sso_setting Allows a user to manage all Single-Sign On (SSO) authentication settings. org_setting.modify_security_banner Allows a user to change the portal login message. session.view_all_session Allows a user to view all test sessions. session.terminate_other_session Allows a user to end another user’s test session. session.modify_other_session Allows a user to change session details and delete sessions. soft_book.terminate_other_soft_book Allows a user to remove a reservation from any device.