Access control permissions overview

Genesys Cloud bases permissions on tasks or job functions. To manage access control, an administrator from the Genesys Cloud organization must assign the appropriate permissions to the selected user or users. For more information about Genesys Cloud’s feature permissions, see Roles and permissions overview.

Important: Before you begin to assign access control to your users, first remove any instances of the General > Admin permission from all existing roles. Anyone with this permission assigned to their user role can create, update, or delete anything within the organization. Remove it to ensure proper access to administrative objects within Genesys Cloud.

Note: It can take up to five minutes for permission updates to make their way through Genesys Cloud and take effect.

Division creation permissions

This table describes permissions related to division creation and management. Users with permission to move administrative objects must have the appropriate divisions assigned to the role that contains the object-based permissions.

This permission Allows these actions

Authorization > Division > Add

Authorization > Division > Grant

 Add a new division.
Authorization > Division > Edit Edit a division’s name, description, and currently assigned objects.
Authorization > Division > Delete Delete an existing division.
Authorization > Division > View View current divisions.

Role permissions

This permission Allows these actions
Authorization > Grant > Add Grant a role to a user.
Authorization > Grant > View View a user’s roles

Configuration object permissions

Before users can move objects between divisions, they must have the appropriate configuration object permissions assigned to their user role. This table describes which permissions allow users to move these objects.

This permission Allows these actions
Directory > User > Edit Move members from one division to another.
Directory > Group > Add Create a group.
Directory > Group > Edit Edit groups.
Architect > Flow > Edit Move any flow type from one division to another.
Outbound > Campaign > Edit Move outbound dialing campaigns members from one division to another.
Outbound > Contact List > Edit Move contact lists from one division to another.
Outbound > DNC List > Edit Move Do Not Contact lists from one division to another.
Outbound > Messaging Campaign > Edit Edit messaging campaigns.
Routing > Queue > Edit Move queues from one division to another.
Workforce Management > Management Unit > Edit
 Move workforce management units from one division to another.
Workforce Management > Business Unit > Edit Edit business units.