> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Manage Service Provider roles

An administrator becomes a Service Provider by being assigned a Service Provider role. Only Service Providers with a **Super Account Manager** role can view and manage the Service Provider roles assigned to users on their account.

The following describes Service Provider roles:

## Super Account Manager

Users with this role have full access to the Service Provider portal. These users can perform all the tasks assigned to On-boarding Administrators as well as:

- Make changes to Service Provider settings.
- Manage the Service Provider roles assigned to other users.
- Remove Tenant accounts (this applies to regular Tenants only. Service Provider Tenants cannot be removed)
- Unlock the administrators of a Tenant

## Account Manager Auditor

Users with this role have view-only access to the Service Provider portal. Auditors cannot make any changes to Service Provider settings.

## On-boarding Administrator

Users with this role can do the following:

- View Tenants
- Add Tenants
- Edit Tenants
- Lock/Unlock Tenants
- Remove Tenants
- Promote Tenants to a Service Provider
- View Tenant Entitlements
- Set Tenant Entitlements

## Entitlement Administrator

Users with this role can do the following:

- View Tenants
- View Tenant entitlements
- Set Tenant entitlements

## API Account on-boarding

Users with this role can add tenants using the Administration API.

## Customer Support Agent

Users with this role can do the following:

- Reset resource rules
- Unlock account administrators
- View usage reports
- View account entitlements
- Reset mail server
- Lock and unlock tenants

## Tenant Management Administrator

Users with this role can do the following:

- View tenants
- View tenant management
- Set tenant management