Skip to main content
Global Admin vs. Product Admin

What's the difference between the Certara Cloud Global Admin role and a product-level Administrator role? Learn more in this article!

Updated over 2 weeks ago

Certara Admin allows super-administrative level users, like IT teams, to act as Global Admins for the entire Certara Cloud portfolio of products.

๐ŸŒŽ What is a Global Admin?

A Certara Global Administrator is a person from your organization with broad permissions to manage:

  • Your Certara account, applications, and subscriptions

  • User access to Certara Admin and specific software products

  • User permissions within specific software products

If you're adding a user who needs access to these functions, just enable the Certara Global Admin role via the toggle on that user's Profile screen.

Choosing a Global Admin: Download our handy guide to choose which users in your organization should be a Global Admin.

Best practice: Appoint a minimum of two Global Admins for each organization. In addition, we recommend assigning a Global Admin role to one member of each team or department within your organization. For example, assign one Global Admin each within Biostats/Programming and Data Management to administer P21 Enterprise, one for your PK/PD team to administer Phoenix, and so forth.

Note: Global Admins can access each individual product, but only to manage user access, seats, modules & permissions. Global Admins are not granted access to a productโ€™s data nor seats/licenses. Global Admins cannot assign themselves access to products or control their own permissions. Only another Global Admin may grant further access to a Global Admin.

๐Ÿ” Managing access to Certara applications

Once a new user is created and saved, you can grant access to the Certara applications to which your organization subscribes by clicking the Give access button.

Choose the product to which you are providing access from the dropdown in the modal. Only the applications to which your organization is subscribed will display. If you are granting access to an existing user, only the applications they don't already have will display. Once you've selected the app, choose Give access.

Now, you can choose the application-level permissions for that user within that specific product.

โš’ Managing roles within Certara applications

Permission to perform specific tasks within each application is now controlled on one screen in the User's profile, with toggles to allow or restrict access to those tasks based on that User's functional role within your organization.

๐ŸŒ Global Admin vs. product-level admin?

While both types of administrator-level users have some control over user management, permissions/roles, and access, there are some notable differences between the two:

Product-level admin

Global admin

Adding users

Can add users, but can only grant or edit product access to the specific applications for which the admin has an admin-level role

Can add users and grant and edit access to all Certara Cloud-connected applications in an organization's Certara subscription

Viewing users

Can view the entire list of users in Certara Admin, and can click to view each user's specific app access and roles/permissions

Can view the entire list of users in Certara Admin, and can click to view each user's specific app access and roles/permissions

Editing roles/permissions

Can only edit the app-specific roles/permissions for apps which the admin has an admin-level role

Can edit the app-specific roles/permissions for any apps connected in the Certara Cloud

Unblocking users

Cannot unblock users

Can unblock any user in Certara Admin for any app

Deactivating users

Can only remove app-specific access from users of apps for which they have an admin-level role

Can deactivate any user via the Deactivate button on the user's profile screen or the ellipsis menu in the Users list

Create & manage API keys

Can create and edit API keys, but not delete or deactivate them

Can create, edit, delete, and deactivate API keys

There are also differences in the ability to manage Settings and view Logs in Certara Admin:

Product-level admin

Global admin

Settings > General

(Certara Admin)

Can view but not edit the Organization name and can check/uncheck the External Licenses Agreement

Can view and update the Organization name and check/uncheck the External Licenses Agreement

Settings > Security

(Certara Admin)

Cannot access this tab to view or make changes

Can view and make any changes to security settings in this tab

Settings > SSO

(Certara Admin)

Cannot access this screen to view or make changes

Can view and update SSO settings in this screen

Settings > Company

(Pinnacle 21 Enterprise)

Can update and save the Custom Fix Tip Label

Can update and save the Custom Fix Tip Label

Settings > Standards Management

(Pinnacle 21 Enterprise)

Can manage change request requirements for Standards, Terminologies, and Study Specs

Can manage change request requirements for Standards, Terminologies, and Study Specs

Settings > Features

(Pinnacle 21 Enterprise)

Can enable system features such as allowing users to request access, showing filepaths, and prompting use of naming conventions

Can enable system features such as allowing users to request access, showing filepaths, and prompting use of naming conventions

Logs > Audit Log

Can view

Can view

Logs > User Log

Cannot view

Can view

Logs > SSO Log

Cannot view

Can view and enable

Did this answer your question?