> For the complete documentation index, see [llms.txt](https://docs.patchmypc.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.patchmypc.com/patch-my-pc-cloud/manage/settings/users/user-roles-reference.md).

# User Roles Reference for Patch My PC Cloud

*Applies to: Patch My PC Cloud*

User roles in the Patch My PC (PMPC) Cloud portal control which administrative tasks a user can perform.

* [Available Roles](#available-roles)
* [Permissions Reference](#permissions-reference)

## Available Roles

Users can be assigned the following User Roles in the PMPC Cloud Portal:

<table><thead><tr><th width="183.22222900390625" valign="top">Role</th><th valign="top">Description</th></tr></thead><tbody><tr><td valign="top">Read-Only Admin</td><td valign="top">Can access all areas of the Cloud portal, but cannot make any changes. This role is intended for audit purposes.</td></tr><tr><td valign="top">Read-Only Report Admin</td><td valign="top"><p>Only have <strong>Read-Only</strong> access to the <strong>Advanced/Patch Insights</strong> and <strong>Settings</strong> nodes. </p><p>They have Read-Only access to:</p><ul><li>All reports in the PMPC Cloud (both PMPC Client and Intune Reports).</li><li>The <strong>Company</strong> and <strong>Users</strong> sections of the <strong>Settings</strong> node.</li></ul><p>They cannot create, edit or delete existing reports or clients.</p></td></tr><tr><td valign="top">Custom App Admin</td><td valign="top"><p>Can perform the following Custom App-related actions in PMPC Cloud:</p><ul><li>Create</li><li>Modify</li><li>Delete custom applications in Patch My PC Cloud.</li></ul><p></p><p>They cannot:</p><ul><li>Create or edit On-Premises Publisher and Intune connections.</li><li>Access the <strong>Settings</strong> node.</li><li>Manage Branding.</li><li>Manage User access requests.</li></ul></td></tr><tr><td valign="top">Intune App Admin</td><td valign="top"><p>Can perform the following actions in PMPC Cloud:</p><ul><li>Create, modify and delete deployments.</li><li>Manage licensing, branding, notifications and the Sync schedule.</li></ul><p>They cannot:</p><ul><li>Create, edit or delete On-Premise Publisher and Custom Apps.</li><li>Access the <strong>Settings</strong> node.</li><li>Manage User access requests.</li></ul></td></tr><tr><td valign="top">Full Admin</td><td valign="top">Can manage all aspects of PMPC Cloud, except for user management.</td></tr><tr><td valign="top">Full Admin with Access Management</td><td valign="top">Can manage all aspects of PMPC Cloud, including user management.</td></tr></tbody></table>

## Permissions Reference

Use the following tables to help you decide which role you should assign a user in Patch My PC Cloud either directly through the Portal or by making them a member of the relevant Entra ID Security Group assigned a role:

| [App Catalog](#app-catalog) | [Discovery](#discovery) | [Deployments](#deployments) | [Domains](#domains) |
| --------------------------- | ----------------------- | --------------------------- | ------------------- |
| [Events](#events)           | [Migration](#migration) | [Settings](#settings)       |                     |

### App Catalog

<table><thead><tr><th width="134.66668701171875">Functionality</th><th width="120.22222900390625">Read-Only Admin</th><th width="151.3331298828125">Read-Only Report Admin</th><th width="164.666748046875">Custom App Admin</th><th>Intune App Admin</th><th>Full Admin</th><th>Full Admin with Access Management</th></tr></thead><tbody><tr><td>Patch My PC Apps</td><td>Read</td><td>Read</td><td>Read</td><td>Read</td><td>Read</td><td>Read</td></tr><tr><td>Custom Apps</td><td>Read</td><td>Read</td><td>Read and Write</td><td>Read</td><td>Read and Write</td><td>Read and Write</td></tr><tr><td>Binary Free Apps</td><td>Read</td><td>Read</td><td>Read</td><td>Read and Write</td><td>Read and Write</td><td>Read and Write</td></tr></tbody></table>

### Deployments

| Read-Only Admin | Read-Only Report Admin | Custom App Admin | Intune App Admin | Full Admin     | Full Admin with Access Management |
| --------------- | ---------------------- | ---------------- | ---------------- | -------------- | --------------------------------- |
| Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |

### Discovery

| Read-Only Admin | Read-Only Report Admin | Custom App Admin | Intune App Admin | Full Admin     | Full Admin with Access Management |
| --------------- | ---------------------- | ---------------- | ---------------- | -------------- | --------------------------------- |
| Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |

### Domains

| Read-Only Admin | Read-Only Report Admin | Custom App Admin | Intune App Admin | Full Admin | Full Admin with Access Management |
| --------------- | ---------------------- | ---------------- | ---------------- | ---------- | --------------------------------- |
| No Access       | No Access              | No Access        | No Access        | No Access  | Read and Write                    |

### Events

| Read-Only Admin | Read-Only Report Admin | Custom App Admin | Intune App Admin | Full Admin | Full Admin with Access Management |
| --------------- | ---------------------- | ---------------- | ---------------- | ---------- | --------------------------------- |
| Read            | No Access              | No Access        | Read             | Read       | Read                              |

### Migration

| Read-Only Admin | Read-Only Report Admin | Custom App Admin | Intune App Admin | Full Admin     | Full Admin with Access Management |
| --------------- | ---------------------- | ---------------- | ---------------- | -------------- | --------------------------------- |
| Read            | No Access              | No Access        | No Access        | Read and Write | Read and Write                    |

### Settings

| Functionality           | Read-Only Admin | Read-Only Report Admin | Custom App Admin | Intune App Admin | Full Admin     | Full Admin with Access Management |
| ----------------------- | --------------- | ---------------------- | ---------------- | ---------------- | -------------- | --------------------------------- |
| Company                 | Read            | Read                   | Read             | Read             | Read and Write | Read and Write                    |
| Users                   | Read            | Read                   | No Access        | No Access        | No Access      | Read and Write                    |
| Environments & Licenses | Read            | Read                   | Read             | Read and Write   | Read and Write | Read and Write                    |
| Connections             | Read            | No Access              | Read             | No Access        | Read and Write | Read and Write                    |
| Branding                | Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |
| Notifications           | Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |
| Sync Schedule           | Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |
| Naming Conventions      | Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |
| Templates               | Read            | No Access              | No Access        | Read and Write   | Read and Write | Read and Write                    |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.patchmypc.com/patch-my-pc-cloud/manage/settings/users/user-roles-reference.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.