Managing built-in roles

Last published : Oct 29, 2026
Built-in roles are predefined roles with a default set of permissions. The following built-in roles are available.
Built-in Role Description
Account Manager This role can create and manage archive user accounts, including updating user details, resetting passwords, configuring aliases and defaults, and managing provisioning options.
The Archive Overview permission is selected by default and cannot be removed. You can select or remove the following permissions:
• View All Accounts
• Create User
• Update User
• Reset Password
• Set Aliases
• Set Defaults
• View Provisioning Options
• Set Provisioning Options
• Disable Preview Emails
API Access Manager This role can manage API access for the organization, including data migration from Enterprise Vault, API key management, and tenant certificate management.
You can select or remove the following permissions:
• Allow Migration Of Data From Enterprise Vault
• Manage API Keys
• Manage Certificates
• View Certificates
Archive Collections Manager This role can configure and manage archiving from third-party content sources, including viewing and editing archive collections and updating Bloomberg settings.
The Archive Overview permission is selected by default and cannot be removed. You can select or remove the following permissions:
• View Archive Collections
• Edit Archive Collections
• Bloomberg Settings
Classification Administrator This role can edit and enable Veritas Information Classifier policies for the organization.
The Archive Overview permission is selected by default and cannot be removed. You can select or remove the following permission:
• Classification Privileges
eDiscovery Administrator This role can configure and manage Arctera eDiscovery usage, including viewing and managing cases, labels, review status, matter status, saved searches, exports, logs, reports, and reviewers.
The following permissions are selected by default and cannot be removed:
• Archive Overview
• View Matter
• Add Matter
• Edit Matter
• Manage Labels
• Manage Review Status
• Manage Matter Status
• Manage Saved Searches
• Create Export
• View Matter Logs and Reports
• Manage Reviewers
• Review Email
You can select or remove the following permissions:
• Share Export
• Privileged Delete
Note: Selecting Privileged Delete allows this role to permanently delete archived items in Arctera eDiscovery. Deleted items cannot be restored. The Privileged Delete option under Policy Management > Archive Options must also be enabled for this permission to take effect.
• Download Export
Policy Manager This role can specify archiving options and settings, manage authentication settings, and manage exclusion texts.
The Archive Overview permission is selected by default and cannot be removed. You can select or remove the following permissions:
• View Policy
• Archive Settings
• Authentication Management
• Manage Exclusion Texts
Retention Manager This role can view and modify archive retention settings and delete retention tags.
The Archive Overview permission is selected by default and cannot be removed. You can select or remove the following permissions:
• View Retention Settings
• Modify Retention Settings
• Delete Retention Tag
Role Manager This role can view and modify administrator privileges for archive accounts.
The Archive Overview permission is selected by default and cannot be removed. You can select or remove the following permissions:
• View Privileges
• Modify Privileges
System Administrator This role can oversee all Arctera Personal Archive accounts, including managing users, roles, policies, provisioning, retention, authentication, archive collections, and reporting across the organization.
The following permissions are selected by default and cannot be removed:
• View All Accounts
• Archive Overview
• Create User
• Update User
• Reset Password
• Set Aliases
• Set Defaults
• View Privileges
• Modify Privileges
• View Policy
• Archive Settings
• View Provisioning Options
• Set Provisioning Options
• View Retention Settings
• Modify Retention Settings
• Delete Retention Tag
• Authentication Management
• View Archive Collections
• Edit Archive Collections
• Classification Privileges
• Manage Notifications
• Bloomberg Settings
• Import Data
• Manage Exclusion Texts
• Manage API Keys
• Manage Certificates
• View Certificates
• View Reports
You can select or remove the following permission:
• Manage Personal Archive Export
You may need to modify a built-in role when its default permissions do not align with your organization's requirements. For example, you can grant the Privileged Delete permission to the eDiscovery Administrator role to allow permanent deletion of archived items in Arctera eDiscovery, or remove permissions that are not required for a specific compliance or governance policy. Modifying a built-in role applies the change to all users currently assigned that role.
To modify a built-in role:
  1. In the left navigation pane, click Role Management > Administration Roles
  2. Expand the Built-in Roles section and identify the role you want to modify.
  3. Expand the role to view associated permissions.
  4. Select or clear the check boxes next to the permissions you want to add or remove for the selected role.
    Note: For most built-in roles, the Archive Overview permission is selected by default and cannot be removed. It is a prerequisite permission that provides base visibility into the archive administration dashboard.
  5. Click Save