User Access Overview

User Role	Collection Management	Search	Analytics	User Management
Super Admin	Full Access	Full Access	Full Access	Full Access
SBAdmin	Full Access	Full Access	Full Access	Full Access
Admin	Full Access	Full Access	Full Access	No Access
Manager	Limited Access	Limited Access	Full Access	No Access
Business User	No Access	Full Access	Full Access	No Access

Super Admin

The Super Admin is the user who initially logs in after installation.
The Super Admin has complete rights for all actions.
There can be only one Super Admin.
The Super Admin can create other users.
The Super Admin can search across all collections.

SBAdmin

SBAdmin User has privileges similar to that of Super Admin user.
There can be multiple SB Admin Users
SBAdmin user has to be created by Super Admin however Super Admin is the default user of SearchBlox.
SBAdmin can change passwords and create users similar to that of Super Admin
SBAdmin will be created with a unique SB-PKEY which can be used to access REST API requests.
The SBAdmin can search across all collections.

Admin

Admins can perform all activities except user management (addition of users in the Admin Dashboard).
There can be more than one Admin.
Admins can search all collections created by Admins and other users.
Admins cannot create or edit new users.
Admin will be created with a unique SB-PKEY which can be used to access REST API requests.
The Admin user can search across all collections.

Manager

A manager has access only to the collections created by the manager user group.
A manager can belong to more than one user group.
A manager can access other menu items on the Admin dashboard, or access can be restricted to "search only".
Managers do not have access to the User tab.
In the 9.2 version it is possible to encrypt content and meta fields. This content can be viewed only by Manager users who have a sensitive option enabled in User Management.
Learn more about Collection Encryption
The Manager user will have access to its specific group collections.

Business User

Business users only have access to the Search Tab and Analytics Tab.
Business users do not have access to collections.
There can be multiple Business users.
Business users can create and update Featured Results.
User Management access is restricted to Business User.
The Business can search across all collections.

Changing Passwords

The user who can log in to the SearchBlox Admin console can change their own password on the Users page once after successful login. The password is encrypted and stored securely.

User Roles and Groups

Users/User Groups can be created by SuperAdmin or SBAdmin while creating Manager Users.
The naming convention requires at least 3 characters and only alphabets are allowed.
SBAdmin and Admin users alone will be given a unique secure SB-PKEY which can be used to access REST API requests.
A User Group has to be created while creating a Manager. Later, the same group(s) can be assigned to other Managers.
After creating a Manager, it is not possible to change the assigned group.

User Management Permissions

Users	Super Admin	SBAdmin	Admin	Manager	Manager - Search Only	Business User
Creating Users	Yes	Yes	No	No	No	No
Changing Self Password	Yes	Yes	Yes	Yes	No	Yes
Change other User's Passwords	Yes	Yes	No	No	No	No
Remove another User	Yes	Yes	No	No	No	No

Sensitive User Roles

Users	Access
SearchBlox Realm - Manager Role Search Only Access	- Does not have access to SearchBlox Admin Console. - Will have access ONLY to the same Manager groups' search results, which includes the Public and Private Manager group collections, along with all other Users' Public collections. - The encrypted collections' content can be accessed ONLY by the Sensitive role Users.
LDAP/OKTA - External Users	- Does not have access to SearchBlox Admin Console. - Can access Secure Search results page. - LDAP or OKTA with AD Users will have restricted access to Private collections, based on User/Role configuration, along with access to all Public collections. - OKTA Users will have restricted secure search access to both Public and Private collections, based on access in the configuration done on the OKTA end.

Users

Access

SearchBlox Realm - Manager Role
Search Only Access

- Does not have access to SearchBlox Admin Console.
- Will have access ONLY to the same Manager groups' search results, which includes the Public and Private Manager group collections, along with all other Users' Public collections.
- The encrypted collections' content can be accessed ONLY by the Sensitive role Users.

LDAP/OKTA - External Users

- Does not have access to SearchBlox Admin Console.
- Can access Secure Search results page.
- LDAP or OKTA with AD Users will have restricted access to Private collections, based on User/Role configuration, along with access to all Public collections.
- OKTA Users will have restricted secure search access to both Public and Private collections, based on access in the configuration done on the OKTA end.