User roles and permissions

Your role sets what you can do in NeoLoad Web, from tests to account settings. Workspace membership then decides which tests and results you see. This topic lists the available roles and the tasks each one can perform. Admins assign roles when they manage users.

Available roles

NeoLoad Web has the following user roles:

• Account Admin: Full access to every area and setting. The only role that can invite and remove users, and only Tricentis can assign it.

• NeoLoad Admin: Full access to every area and setting, except that this role can't invite or remove users.

• Tester: Access to tests, results, and dashboards in assigned workspaces, but not to account settings.

• Guest: Read-only access to test results and dashboards.

Permissions by role

The following table shows which tasks each role can perform.

Task	Account Admin	NeoLoad Admin	Tester	Guest
Invite and remove users	Yes	No	No	No
Change a user's role	Yes	Yes	No	No
Assign users to workspaces	Yes	Yes	No	No
Grant access to Agent Performance Testing	Yes	Yes	No	No
Create, edit, and delete workspaces	Yes	Yes	No	No
Add and remove workspace members	Yes	Yes	No	No
Guarantee virtual users and set resource limits	Yes	Yes	No	No
Create workspace webhooks	Yes	Yes	No	No
Create and manage zones	Yes	Yes	No	No
Enable cloud zones	Yes	Yes	No	No
Allocate dedicated IPs	Yes	Yes	No	No
Enable reservations for the account	Yes	Yes	No	No
Create, configure, and run tests	Yes	Yes	Yes	No
Select a zone for a test	Yes	Yes	Yes	No
View test results and dashboards	Yes	Yes	Yes	Yes
Use the public API	Yes	Yes	Yes	Read-only

Access outside your role

Your role isn't the only thing that controls your access:

• Workspace membership decides which tests and results you see. Admins manage workspace members for each workspace.

• Any workspace member can manage workspace deletion policies, whatever their role.

• Access tokens carry your own permissions, so a token can never do more than you can.