Overview
Certara Admin is where your organization manages who can sign in to Certara Cloud and which products each person can use. Each person has a user account with a single Certara ID. A new account gives access to shared resources, such as help centers and webinars, but not to any product. An administrator must give the user access to each product, and then assign the roles and modules that the product offers.
Users
People with the User role work in the products that an administrator assigns to them. Each product defines its own product roles, which set what a person can do in that application.
Product Admin
A Product Admin manages access to the products they administer. Each product defines which of its roles is the Product Admin role, and that role displays a Product Admin badge.
Global Admin
Certara Admin allows super-administrative level users, like IT teams, to act as Global Admins for the entire Certara Cloud portfolio of products.
How roles fit together
The tree shows how the roles fit together. Parentheses describe scope or action.
Certara Admin roles
├─ User (works in assigned products)
│ └─ Product Access (holds)
│ ├─ Phoenix
│ │ ├─ Product Roles
│ │ └─ Modules/Licenses
│ └─ Integral
│ ├─ Product Roles
│ └─ Modules/Licenses
├─ Product Admin (manages products they administer)
│ └─ Product Access (assigns others)
└─ Global Admin (manages all products)
└─ Product Access (assigns others)
Note: A Global Admin or Product Admin cannot give themselves product access or roles. Another Global Admin, or a Product Admin for that product, must grant them. A Global Admin or Product Admin can assign themselves module licenses only if Certara has turned on self-assignment for your organization.
What is a Global Admin?
A Certara Global Administrator is a person from your organization with broad permissions to manage:
Your Certara account, applications, and subscriptions
User access to Certara Admin and specific software products
User permissions within specific software products
If you're adding a user who needs access to these functions, just enable the Certara Global Admin role via the toggle on that user's Profile screen.
 | Choosing a Global Admin: Download our handy guide, Choosing a Global Admin, at the bottom of the screen for additional guidance on choosing which users in your organization should be a Global Admin. |
Best practice: Appoint a minimum of two Global Admins for each organization. In addition, we recommend assigning a Global Admin role to one member of each team or department within your organization. For example, assign one Global Admin each within Biostats/Programming and Data Management to administer P21 Enterprise, one for your PK/PD team to administer Phoenix, and so forth.
Note: Global Admins can access each individual product, but only to manage user access, seats, modules & permissions. Global Admins are not granted access to a product’s data nor seats/licenses. Global Admins cannot assign themselves access to products or control their own permissions. Only another Global Admin may grant further access to a Global Admin.
Managing access to Certara applications
Once a new user is created and saved, you can grant access to the Certara applications to which your organization subscribes by clicking the Give access button.
Choose the product to which you are providing access from the dropdown in the modal. Only the applications to which your organization is subscribed will display. If you are granting access to an existing user, only the applications they don't already have will display. Once you've selected the app, choose Give access.
Now, you can choose the application-level permissions for that user within that specific product.
Managing roles within Certara applications
Permission to perform specific tasks within each application is now controlled on one screen in the User's profile, with toggles to allow or restrict access to those tasks based on that User's functional role within your organization.
Global Admin vs. product-level admin?
While both types of administrator-level users have some control over user management, permissions/roles, and access, there are some notable differences between the two:
| Product-level admin | Global admin |
Adding users | Can add users, but can only grant or edit product access to the specific applications for which the admin has an admin-level role | Can add users and grant and edit access to all Certara Cloud-connected applications in an organization's Certara subscription |
Viewing users | Can view the entire list of users in Certara Admin, and can click to view each user's specific app access and roles/permissions | Can view the entire list of users in Certara Admin, and can click to view each user's specific app access and roles/permissions |
Editing roles/permissions | Can only edit the app-specific roles/permissions for apps which the admin has an admin-level role | Can edit the app-specific roles/permissions for any apps connected in the Certara Cloud |
Unblocking users | Cannot unblock users | Can unblock any user in Certara Admin for any app |
Deactivating users | Can only remove app-specific access from users of apps for which they have an admin-level role | Can deactivate any user via the Deactivate button on the user's profile screen or the ellipsis menu in the Users list |
Create & manage API keys | Can create and edit API keys, but not delete or deactivate them | Can create, edit, delete, and deactivate API keys |
There are also differences in the ability to manage Settings and view Logs in Certara Admin:
| Product-level admin | Global admin |
Settings > General (Certara Admin) | Can view but not edit the Organization name and can check/uncheck the External Licenses Agreement | Can view and update the Organization name and check/uncheck the External Licenses Agreement |
Settings > Security (Certara Admin) | Cannot access this tab to view or make changes | Can view and make any changes to security settings in this tab |
Settings > SSO (Certara Admin) | Cannot access this screen to view or make changes | Can view and update SSO settings in this screen |
Settings > Company (Pinnacle 21 Enterprise) | Can update and save the Custom Fix Tip Label | Can update and save the Custom Fix Tip Label |
Settings > Standards Management (Pinnacle 21 Enterprise) | Can manage change request requirements for Standards, Terminologies, and Study Specs | Can manage change request requirements for Standards, Terminologies, and Study Specs |
Settings > Features (Pinnacle 21 Enterprise) | Can enable system features such as allowing users to request access, showing filepaths, and prompting use of naming conventions | Can enable system features such as allowing users to request access, showing filepaths, and prompting use of naming conventions |
Logs > Audit Log | Can view | Can view |
Logs > User Log | Cannot view | Can view |
Logs > SSO Log | Cannot view | Can view and enable |
📥 Downloads