Roles and permissions
Who it is for
For anyone planning who on your side takes which role.
Why
Four roles sit with you and one with Romy. Here you see which Microsoft role each one needs and in which step it is needed.
The five roles
Often one person on your side is the admin for Microsoft 365, Intune and Teams at once. Then they wear three hats.
Microsoft 365 admin
your sideConsents once to Romy reading, and decides on channel and pilot group.
Microsoft role
Global Administrator or Privileged Role Administrator, for the consent only
Intune admin
your sideCreates the groups and the role, uploads the Romy App for Windows and updates it.
Microsoft role
Intune Administrator for the first setup. After that the role “Romy App Installer” is enough.
Teams admin
your sideUploads Romy on Teams to the org catalog and makes it available to the pilot group.
Microsoft role
Teams Administrator
Employees
your sideMessage Romy in Teams and confirm every action on their own device themselves.
Microsoft role
None. A normal Teams account is enough.
Romy operations
at RomyShips releases, approves new devices, enters the pilot people and watches every order in Romy Studio.
Microsoft role
None in your tenant. Romy only has what you grant by consent.
Who does what in which step
| Step | Microsoft 365 admin | Intune admin | Teams admin | Employees | Romy operations |
|---|---|---|---|---|---|
| 1Choose channel and pilot group | not involved | not involved | not involved | ||
| 2Sign in to the Romy Platform | not involved | not involved | not involved | not involved | |
| 3Let Romy Diagnostics read | not involved | not involved | not involved | not involved | |
| 4Create groups, scope tag and role | not involved | not involved | not involved | not involved | |
| 5Deploy the Romy App for Windows | not involved | not involved | not involved | not involved | |
| 6Approve the device in Romy Studio | not involved | not involved | not involved | not involved | |
| 7Deploy Romy on Teams | not involved | not involved | not involved | not involved | |
| 8Name the pilot people | not involved | not involved | not involved | ||
| 9The first chat | not involved | not involved | not involved | ||
| 10Act through Intune with a service account | not involved | not involved | not involved | not involved | |
| 11Install a new release | not involved | not involved |
does itis involved