---
title: "Admin Roles"
slug: "admin-roles-v6-5"
description: "Manage user access with AppGate by configuring admin roles and privileges for delegated administration in a secure environment."
updated: 2025-10-31T18:28:04Z
published: 2025-10-31T18:28:02Z
canonical: "support.appgate.com/admin-roles-v6-5"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Admin Roles

As well as allowing fine grained control over user access to (protected) hosts, the Appgate SDP system also allows similar fine grained control over the rights to use the Admin UI. Configure multiple new Roles for setting up delegated administration rights. Create a Role for a specific type of privilege (such as View) in specific areas of the Admin UI (such as Audit Logs). Admin Roles are assigned to users using Policies.

## Before you start

Information you will need

- System administration privileges: confirm the admin privileges that are to be delegated and related targets (refer to [System Administrators](/v1/docs/admin-user-access)
- Tags: confirm tags to be used to restrict the scope of admin privileges

Background reading

- Creating local accounts: refer to [Manage Local User Accounts](/v1/docs/local-users)
- Delegating administration: refer to [System Administrators](/v1/docs/admin-user-access)
- System security best practice: refer to [Admin Roles & Rights](/v1/docs/system-security-best-practice)

Use the Admin Roles form for:

- [Configuring admin roles](/v1/docs/configure-admin-roles)
- Configuring privileges for administrators to allow delegated administration
  - This can be especially important in 'managed service' environments where customers may require some but not all privileges on some but not all (tagged) targets.
- Configuring privileges for an API user

> [!NOTE]
> **NOTE**
> 
> MFA for Admins is configured in [MFA for Admins.](/v1/docs/mfa-for-admins)

For details on completing the form, refer to [configure admin roles.](/v1/docs/configure-admin-roles)

Appgate SDP (Software Defined Perimeter) is a security solution that provides secure access to resources based on user identity and context, leveraging a zero trust security model.

Labels assigned to entitlements or resources that help categorize and manage them within the Appgate ZTNA system.