Predefined roles

Practice Protect Identity Services provides the following predefined Roles or Groups:
  • Everybody: By default, all users in the Practice Protect Directory are assigned to this role. Use this role when you want an application to be automatically assigned to every user added to Practice Protect.
  • App Testing: This role is used by Practice Protect to test applications before they are deployed to users. It helps ensure that applications are working as expected before they are made available to staff.
  • Restricted User: Use this role when you want to restrict a staff member’s access to specific locations or IP addresses. This role is associated with the IP Block policy in Practice Protect.Ensure that the firm’s approved static IP addresses are configured in the relevant policy. If an IP address needs to be added or updated, configure the policy accordingly to ensure the user can access Practice Protect from the approved location.
  • [Country Code] User – Geo Locking: This role is used to apply country-based access restrictions through the associated Geo Locking policy. Users must be assigned to the appropriate country-specific role to maintain access in accordance with the firm’s configured country restrictions.
  • Systems Administrator: This role grants full access to all settings in the Practice Protect Admin Portal. By default, the Practice Protect Directory account used to register for Practice Protect Identity Services is assigned to this role.Important: Assign this role only to trusted users who require full administrative access, as members can manage all Admin settings.
Updated on October 26, 2026

Related Articles

Need Support?
Can't find the answer you're looking for?
Contact Support