# Roles

Unifi includes several roles which can be used to delegate and control what users are able to do.

## Application Roles

### Unifi Admin \[x\_snd\_eb.admin]

The Unifi Admin role can be useful where configuration of integrations is delegated to specific users who should not have full admin access. These users will have access to configure all integrations in Unifi. This is normally the role that would be used in Production.

{% hint style="info" %}
We recommend using the out-of-box System Admin \[admin] role to configure integrations in your development environment. Integrations often require new fields or process changes which cannot be made without it.
{% endhint %}

### Unifi Manager \[x\_snd\_eb.manager]

The Unifi Manager role is designed for users who are managing operations in your Production instance. Users with this role will not be able to configure integrations, but they will be able to see all the configuration and manage operational functionality such as manual replay.

### Unifi User \[x\_snd\_eb.user]

Users with the Unifi User role are granted read-only access to transactional information on integrations to aid them in their supporting your business and customers. This role is only necessary when the Read-only Role does not apply.

### Unifi Integration \[x\_snd\_eb.integration]

The Unifi Integration role allows user accounts that represent an integration to be identified and gives them access to Unifi web services. It is required for inbound integration users who are specified on a Unifi Connection.

## System Roles

### System Admin \[admin]

Integrations should be configured in your development instance and this is normally done by developers with the out-of-box system admin role. The developer will have full access to see and configure everything necessary for your integrations to function.

{% hint style="info" %}
Users with the ServiceNow System Admin role do not require other roles.
{% endhint %}

### ITIL \[itil]

The ITIL role is an out-of-box role that is assigned to your ITSM staff so they can view and manage tickets. By default, this role grants the same access to transaction information as the Unifi User \[x\_snd\_eb.user] role.

{% hint style="info" %}
Choose a different role by configuring the system property Read-only Role \[x\_snd\_eb.read.role]. The default value is "itil".
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sharelogic.com/unifi/4.3/about/roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.