Hey @Reuven Zabirov, I noticed you helped others with this ask: We would like to be able to edit the

Tenant Admin

role for all our projects. cc @David Caizzi

Editing the Tenant Admin Role The Tenant Admin role can be customized across your projects. You can edit the Tenant Admin role to change its name, add or remove permissions, and set it as a default role . How to Edit the Tenant Admin Role 1. Navigate to the Authorization page in the Descope Console 2. Find the Tenant Admin role in your roles list 3. Click the menu next to the role name to access edit options Default Permissions The Tenant Admin role comes with three core permissions that enable administrative capabilities for tenants: • SSO Admin permission - allows reading and modifying SSO configurations • User Admin permission - allows reading and modifying user data • Impersonate permission - allows acting on behalf of another user Cross-Project Availability Since the Tenant Admin role is a project-level role, changes made to it will apply across all your projects. Project-level roles are available to all users across all tenants in your project . Role-Based Access Control | Descope Documentation

Click the menu next to the role name to access edit options

Does not work for us

Permission Restrictions for Project-Level Roles The Tenant Admin role is a project-level role, which means project-level roles are not editable by tenant-level users . This restriction explains why you can't access the edit menu. What You Need to Edit the Tenant Admin Role To modify the Tenant Admin role, you need project-level administrative permissions. Users with tenant-level access cannot access other tenants or project-level settings . Alternative Approaches 1. Use an account with project-level permissions to access the Authorization page and edit the Tenant Admin role 2. Create custom tenant-level roles instead by going to individual tenants and creating roles specific to each tenant 3. Use delegation roles to allow tenant admins to create and manage their own roles within their tenant scope The edit restriction is by design to maintain separation between project-level and tenant-level administrative boundaries. Admin Widgets | Descope Documentation FedRAMP Security Admin Guide | Descope Documentation Role-Based Access Control | Descope Documentation

Hey @Jeff Brainerd, are you talking about this?:

Hi @Bhagyesh Parna, yes that's the role we're referring too. No one in our organization is able to modify it (edit permissions, hide role, delete). We'd like to be able to hide the role. Any ideas what's going wrong?

Can you check now @David Caizzi ?

Yep, I see the option now and can hide it. Thanks!

It's basically a new feature, if your projects were created before the feature they are not editable by default. I had to run a DB query to adjust

Ah, roger that. Thanks for the help!