There are two types of admin roles, global and scoped. Global admin roles, such as System Administrator, System Configuration Administrator, Catalog System Administrator, and SPML Admin, can only be assigned in the context of the Top organization only. Scoped admin roles can be assigned in the context of both Top as well as other organizations.

Admin roles cannot be created, updated, deleted, searched, or requested.


Admin roles are predefined for each entity(Entity refers to role, user, organization, entitlement, and application instance.). For the users, there is no system administrator role because users must be managed by the designated delegated administrators. Each entity has the following admin roles defined for it:
1)Entity Administrator: Can manage the entire lifecycle of the entity and perform any operation on the entity.

2)Entity Viewer: Can view the entity in the catalog or request profile and request for the entity.

3)Entity Authorizer: Can view the entity in the catalog or request profiles and request for it, but does not require approval. There is no authorizer on the organization entity because organization membership cannot be requested. Similarly, there is no authorizer for the user. The user admin and user authorizer are the same.