---
title: "How to use Admin Roles in the AppGate ZTNA system"
slug: "admin-roles-v6-7"
description: "You can configure Admin Roles for setting up delegated administration rights, or create a role for a specific type of privilege in the Admin UI. Admin Roles are assigned to users using Policies."
updated: 2026-03-13T21:03:16Z
published: 2026-04-03T16:41:11Z
canonical: "support.appgate.com/admin-roles-v6-7"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Admin Roles

As well as allowing fine-grained control over user access to protected hosts, the AppGate ZTNA system also allows fine-grained control over the rights to use the admin UI. You can configure new roles for setting up delegated administration rights, or create a role for a specific type of privilege in specific areas of the admin UI. Admin roles are assigned to users using policies.

## Before you start

Information you will need before configuring admin roles:

- ***System administration privileges***. Confirm the admin privileges that are to be delegated and the related targets. Refer to [Admin user access](/v1/docs/admin-user-access-v6-7) for more information.
- ***Tags***. Confirm the tags that will be used to restrict the scope of admin privileges.

Background reading:

- For more information on creating local accounts, see the [Local users](/v1/docs/local-users-v6-7) section.
- For more information on delegating administration, see the [Admin user access](/v1/docs/admin-user-access-v6-7) section.
- For system security best practices, see the information on [Admin roles and admin rights](/v1/docs/system-security-best-practice-v6-7#7-admin-roles).

Use the **Admin Roles** page for:

- Creating new admin roles.
- Configuring privileges for administrators to allow delegated administration. This is important in managed service environments where customers may require some, but not all, privileges on some tagged targets.
- Configuring privileges for an API user.

> [!NOTE]
> **NOTE**
> 
> To configure MFA for an administrator, see [MFA for Admins.](/v1/docs/mfa-for-admins-v6-7)

When you are ready to start creating admin roles, see the [Configure admin roles](/v1/docs/configure-admin-roles-v6-7) section.