PIM Manager settings · Settings > Manager access & roles
Manage delegation / role mapping
| Key | ManagerAccess.RoleMapping |
|---|---|
| Where | Settings > Manager access & roles |
| Type | Map (one value per item) |
| Default | Empty (only the access granted at setup applies; every other signed-in user is a Reader) |
| Feature | Access map: your delegation model on one board · Community, Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched on. |
What it does
Who may do what in PIM Manager: each sign-in name is mapped to Reader (view only), Delegated (view only, limited to the groups they own), Admin (stage, commit and revoke) or SuperAdmin (everything, including settings, emergency access and this map). Each entry is one person; groups are not expanded.
When set
When saved: the server enforces the map on every request, within about 15 seconds. Saving is refused if no SuperAdmin would remain, and a new Delegated entry needs Pro. Without Pro, an existing Delegated entry acts as Reader.
When blank or default
For a person not in the map (and not granted at setup): PIM Manager still lets them in as a Reader if they can sign in, so they can view configuration and assignments but not change anything.
Risk and how to reverse it
Admin and SuperAdmin can change who holds privileged access in your tenant through the engine, so grant them only to people who need them. Removing someone takes effect within seconds. Reversible: edit the map again. Every save is audited.
Requires
SuperAdmin to change it. Delegated entries need Pro; Reader, Admin and SuperAdmin are Free (Community). At least one SuperAdmin must remain.
Recommended
Keep two SuperAdmins (so second-approver controls work), give everyday operators Admin, and limit who can sign in to PIM Manager at all with the app's user assignment.
Related settings
- Delegation Map FeatureFlags.map
- Give new department owners Reader access (their normal account) DepartmentOwnersGetReader
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack