Learn about the differences for Kandji Team Members
New Team Members may be invited only via the Company's Kandji Account inside the Settings tab. Account owner - a variation of Admin role that cannot be modified/removed by other Admins, is created upon new instance sign up or may be transferred from another Admin. You can also see our Modify or Remove Team Members page for more information.
Account Owner
Full access to all functionality. The Account Owner is not able to be deleted by other team members.
When creating your Kandji account, the first team member will be given 24 hours to activate their account via email. If 24 hours pass before the account is created, attempting to reset the password will send a new email link.
Administrator
Full access to all functionality. Accounts with this role can be deleted by other administrators.
Additional administrators will have 24 hours to activate their Kandji account via email. If 24 hours pass before the account is created, an existing admin must re-send the invitation.
Standard
Same permissions as Administrator accounts without access to Settings.
Help Desk
No access to Settings and has read-only access to Blueprints and Library Items. Helpdesk users can perform all device actions, including deleting a device.
Auditor
Limited read-only access to the Kandji Web App.
Permissions Overview
Category | Permission | Owner | Admin | Standard | Help Desk | Auditor |
---|---|---|---|---|---|---|
Configuration | Manage Blueprints | ✅ | ✅ | ✅ | Read Only | Read Only |
Manage Parameters | ||||||
Manage Library Items | ||||||
Device Management | Enroll Devices | ✅ | ✅ | ✅ | ✅ | Read Only |
Manage Enrollment Portal | ||||||
Manage Devices | ||||||
Manage User Assignments | ||||||
Edit Blueprint Assignment | ||||||
Basic Device Actions | Send Blank Push | ✅ | ✅ | ✅ | ✅ | ❌ |
Set Device Name | ||||||
Renew MDM Profile | ||||||
Reinstall Agent | ||||||
Unlock User Account | ||||||
Sensitive Device Actions | Lock Device | ✅ | ✅ | ✅ | ✅ | ❌ |
Erase Device | ||||||
Restart Device | ||||||
Shutdown Device | ||||||
Set Auto Admin Password | ||||||
Delete User Account | ||||||
Access Device Secrets | ||||||
Delete device record | ||||||
Settings & Integrations | Company Settings | ✅ | ✅ | ❌ | ❌ | ❌ |
User Management | ||||||
Integrations | ||||||
Apple Integrations | ||||||
Self Service Settings | ||||||
API Token | ||||||
Ownership | Account Permanence | ✅ | ❌ | ❌ | ❌ | ❌ |
Transfer Account Ownership |