Roles

Last Updated: October 13, 2026

Vasion Automate includes built-in default roles and shares a global admin role with Virtual Appliance. This topic describes all available default roles across both products. You cannot edit or delete default roles.

You manage print roles in the Admin Console in Virtual Appliance. You cannot configure these roles on the Vasion Automate Roles and Permissions page.

Global Role

Global Role Reference
Role	Apps	Description
Root Admin or Admin	Global or all	The main admin account receives this role when it is created during instance initialization. This user has full access to all the functionality that their tenant licensed but not necessarily access to all data. Vasion Automate and Virtual Appliance share one Root Admin or Admin account. Previously this role was called "Root" in PrinterLogic.

Vasion Automate Roles

Automate Roles Reference
Role	Apps	Description
Application Admin	Admin	This role provides the same permissions as the Root Admin or Admin role, but this admin cannot edit their own permissions.
Creator	Forms, Workflow, Sign, and Storage	This role provides full access to create and edit content in Forms, Workflow, Signature, and Storage; it does not include admin permissions.
Collaborator	Forms, Workflow, and Storage	This role provides view-only access to items shared with the user. Collaborators cannot create new content.

Virtual Appliance Roles

You manage the following roles in the Admin Console in Virtual Appliance.

Print Roles Reference
Role	Apps	Description
Root Admin	Global	The main admin account receives this role when it is created during instance initialization. This user has full access to all the functionality that their tenant licensed but not necessarily access to all data. Vasion Automate and Virtual Appliance share one Root Admin or Admin account. Previously this role was called "Root" in PrinterLogic.
Administrator	Virtual Appliance	This role provides full management access to print management. This admin can add and remove other users and identities, configure all settings in the Admin Console, and reset passwords for others, including other admins. However this admin cannot reset the password for the Virtual Appliance Root Admin.
Site Manager	Virtual Appliance	This role provides full management access to the folders assigned to the manager. This manager does not have permission to change global settings that affect more than their scope. For example the ability to add or delete users and drivers.
Deploy Manager	Virtual Appliance	This role provides the ability to deploy, manage, and delete printers in the folders assigned to the manager.
Help Desk	Virtual Appliance	This role provides the ability to view print jobs in the queue and printers with errors.
Print Job Report Manager	Virtual Appliance	This role provides the ability to run print job auditing reports for printers in the folders assigned to the manager.
Administrative Auditor	Virtual Appliance	This role provides the ability to audit changes made in the Admin Console.
Custom	Virtual Appliance	You manually assign permissions for this role, depending on which operational tasks the role needs to perform.

Refer to Role-Based Access Control (RBAC) for full details about Admin Console role access.

Vasion Automate Role Permissions

Vasion Automate roles and permissions are applicable when you have enabled PrinterLogic Output so you can access Output Rules.

Expand each section below to view the individual permissions you can assign when creating a custom role.

Workflow

Create and manage new workflows.
Create and manage rules.
Access shared workflows.

Next Steps

Refer to the following:

Create a New Custom Role to define a role customized to your organization's needs.
Create a New User to assign roles when setting up a new account.
Manage Users to update role assignments for existing users.

In this topic: