---
title: User Roles
slug: user-roles
createdAt: 2026-05-04T09:03:41.865Z
---

The following roles are available in the Authenticator Application by default:

| Role                     | Description                                                         | Key Permissions                                                                                                 |
| ------------------------ | ------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| **System Administrator** | Owns the Authenticator configuration; manages all users and roles   | Full access to all AUTH screens; create/edit/deactivate users; define roles; configure SSO/LDAP; view audit log |
| **IT Administrator**     | Day-to-day user management and role assignment                      | Create/edit users; assign roles; reset credentials; view audit log                                              |
| **Shift Supervisor**     | Manages badge/PIN assignment for the shop-floor team during a shift | Reset PIN for own team; view active sessions for their location                                                 |
| **Shop Floor User**      | Authenticates to use Mantsu on the shop-floor device                | Login via badge, PIN or username/password; change own PIN                                                       |