Admins

Oblique organizations include three default roles:

• Organization owner: Owns the Oblique organization, can perform all actions in Oblique, and receives all communications. Each Oblique organization has one owner.
• Admin: Manages the organization, including managing integrations, users, groups, resources, listings, and entitlements, and creating Oblique API keys.
• Member: Member of the organization. Members can become members of groups and have entitlements granting them access.

Objects can also have owners. Object owners are users or groups who can make or approve changes to an object, such as an attribute-based group, team group, reporting group, or listing. By default, Oblique admins are owners of all groups and listings in Oblique.

Although admins can create Oblique API keys, the organization owns these keys, not the individual admin. When you remove an admin, the API keys remain valid.

By default, the organization owner receives all communications about Oblique, including billing and security notifications.

Add an admin

Note

You can’t add a group as admin. Instead, add the group’s members as admins.

You must be an admin to add an admin.

Navigate to the admins page.

1. Under Admins, select Add admin.
2. Search for and select the user you wish to add as an Oblique admin.
3. Select Add admins.

Remove an admin

Caution

Removing an admin doesn’t invalidate their API keys. To invalidate these keys, navigate to the API keys page and filter for keys created by that admin.

You must be an admin to remove an admin.

Navigate to the Admins page.

1. Under Admins, locate the user to be removed. If you have a lot of admins, use the search bar to more easily find them.
2. For the selected user, in the More menu, select Remove admin….
3. Confirm you want to remove the admin, and select Remove admin.

Caution

If you’re the last admin, you cannot remove yourself.

Change the organization owner

You must be an admin to change the organization owner.

Navigate to the Admins page.

1. Under Organization owner, select Change owner.
2. Search for and select the user you wish to make the new owner.
3. Select Update owner.

Caution

Any admin can update the organization owner, not just the existing owner.

Verify ownership of an Oblique organization

Oblique requires you to show control of your organization’s domain when requesting help from our support team for certain issues, such as claiming ownership of your organization’s Oblique tenant. Our support team will ask you to do one of the following:

• Respond to a confirmation email sent to an address at your organization, such as to the existing owner
• Set a DNS TXT record for your domain

Permission matrix

By default, all members of an organization can 📥 make change requests, but cannot make changes unilaterally. Members who are the owners of affected objects can ✅ approve requests for those objects, including self-approve. Admins can make or approve any change.

Users and resources cannot be directly added to Oblique. Instead, they are automatically imported when they are discovered in and synced from an integration.

Target	Action	Description	Is a request	Admin	Object owner	User
User	CREATE	Import a user.	❌	❌	n/a	❌
Team	CREATE	Create a team group.	✅	✅	n/a	📥
Team	DELETE	Delete a team group.	Coming soon	✅	✅	📥
TeamProfile	UPDATE	Update a team group’s description.	Coming soon	✅	✅	❌
TeamMember	CREATE	Add a user to a team group.	✅	✅	✅	📥
TeamMember	DELETE	Remove a user from a team group.	✅	✅	✅	📥
TeamOwner	CREATE	Add an owner to a team group.	✅	✅	✅	📥
TeamOwner	DELETE	Remove an owner from a team group.	✅	✅	✅	📥
Group	CREATE	Create an attribute-based group.	❌	✅	n/a	❌
		Create a reporting group.	❌	✅	n/a	✅
Group	DELETE	Delete an attribute-based group or reporting group.	❌	✅	✅	❌
GroupOwner	CREATE	Add an owner to an attribute-based group or reporting group.	✅	✅	✅	📥
GroupOwner	DELETE	Remove an owner from an attribute-based group or reporting group.	✅	✅	✅	📥
Resource	CREATE	Import or create a resource.	❌	❌	n/a	❌
Resource	UPDATE	Change a resource’s management mode.	❌	✅	❌	❌
Entitlement	CREATE	Create an entitlement for a resource.	✅	✅	n/a	❌
		Assign a listing role.	✅	✅	✅	📥
Entitlement	UPDATE	Edit an entitlement for a resource.	✅	✅	n/a	❌
		Edit a listing role assignment.	✅	✅	✅	📥
Entitlement	DELETE	Revoke an entitlement for a resource.	✅	✅	n/a	❌
		Revoke a listing role.	✅	✅	✅	📥
Listing	CREATE	Create a listing.	❌	✅	n/a	❌
Listing	UPDATE	Edit a listing’s name, description, or visibility.	❌	✅	✅	❌
Listing	DELETE	Delete a listing.	❌	✅	✅	❌
ListingRole	CREATE	Add a role to a listing.	❌	✅	❌	❌
ListingRole	UPDATE	Edit a listing role name, description.	❌	✅	✅	❌
		Edit a listing role mapping.	❌	✅	❌	❌
ListingRole	DELETE	Remove a role from a listing.	❌	✅	❌	❌
ListingOwner	CREATE	Add an owner to a listing.	✅	✅	✅	📥
ListingOwner	DELETE	Remove an owner from a listing.	✅	✅	✅	📥
ListingRolePolicy	CREATE	Add an auto-approval policy.	Coming soon	✅	❌	❌
ListingRolePolicy	DELETE	Delete an auto-approval policy.	Coming soon	✅	❌	❌
Integration	CREATE	Add an integration.	❌	✅	n/a	❌
Integration	UPDATE	Update an integration’s settings, including allowing resource creation and approvals from Slack.	❌	✅	n/a	❌
ServiceAccount	CREATE	Create an API key.	❌	✅	n/a	❌
ServiceAccount	DELETE	Revoke an API key.	❌	✅	n/a	❌
Admin	CREATE	Add an admin.	❌	✅	n/a	❌
Admin	DELETE	Remove an admin.	❌	✅	n/a	❌
Owner	UPDATE	Change the organization owner.	❌	✅	n/a	❌

Only admins can view recommendations and open requests from them.

Note

The organization owner has the same permissions as an admin.