Administration on the Unifyia platform is managed by administrators. The role of administrators is very crucial and well defined in the Unifyia platform. However, the platform allows organizations to customize the access privileges and responsibilities of an administrator.

During the deployment of the Unifyia platform, a default system (platform) administrator is created. Once the Unifyia platform is up and running, this system administrator logs into the platform and creates other administrators with appropriate access privileges and also other privileged roles such as Sponsors, Registrars, Security Officers, Adjudicators, Identity Issuers, Helpdesk Operators, Operators, etc. as per the organization's access policies. This account usually has elevated privileges and is responsible for setting up the system, configuring user roles, and ensuring that other necessary administrative accounts are created. On a broader scale, this role has the ability to configure the application's security, manage roles, and grant or restrict access based on the organization's needs in addition to the various policies, configurations, integrations, and reports that it needs to complete the system set up.

It is highly recommended that the default system administrator register for at least one passwordless authentication method during their initial login using system-generated credentials (email and password) to ensure secure access and account personalization. Administrators can choose to create a new password, register a passkey (FIDO2), or configure OTP-based login with authenticator apps such as Google Authenticator or Microsoft Authenticator to access the platform. For detailed instructions, refer to the System Administrator Login tutorial on setting up passwordless authentication.

Administrators are responsible for implementing the organization's user, identity, and access management policies in alignment with the overall identity and access management framework. Their primary responsibilities include:

Administrator General Responsibilities

Administrator Additional Responsibilities

Creating Privileged Users

The platform enables administrators to sponsor, enroll, manage, adjudicate, and disable privileged user accounts, ensuring proper access levels throughout the user's lifecycle within the organization. They can create and enroll additional administrators or privileged users, including roles like Sponsors, Registrars, Security Officers, Adjudicators, Identity Issuers, Helpdesk Operators, and assign the appropriate privileges and lifecycle actions. Organizations also have the flexibility to define custom roles, assigning specific privileges, tasks, and actions as needed within the scope of the platform's features. Learn how to create administrators and PIV Roles users.

Let's get started