Can a custom technician role have global scope without full admin access?Solved

Participant
Discussion
5 months ago Mar 05, 2026

Hi everyone. I’m trying to create a custom technician role that has fewer permissions than a full admin, but still has access to all device groups, users, and devices in the portal.

When I configure the role scope, it looks like I have to manually select the groups. The issue is that we frequently add new device groups, and the admin team would need to remember to update the technician role scope every time, which could easily be missed. Is there a way to give a custom technician role automatic global access (to include current and future groups) without making the technician a full admin?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
5 months ago Mar 05, 2026
Marked SolutionPending Review

Hello,

Thanks for reaching out to Hexnode Connect.

Currently, Hexnode does not support assigning an automatic global or dynamic scope to a custom technician role. Custom technician role scopes are static based on the groups or objects selected during configuration, meaning newly created groups are not automatically added to them.

To manage this, you currently have two options:

  • Assign Full Admin Access: If a technician needs true, unrestricted global access across the portal (including to all future groups), they must be assigned a role with full admin-level access.
  • Manual Scope Maintenance (Workaround): If the technician strictly requires reduced permissions, the custom role scope must be updated manually. We recommend making this part of your internal admin workflow—whenever a new device group is created, admins should simultaneously review and update any custom technician roles that need access to that group.

I hope this clarifies the current behavior! Feel free to reach out if you have any more doubts or need further assistance.

Best regards,
George,
Hexnode UEM

Save