There available levels of administrative privilege are:
- Mail—Manages mailboxes within the domain for which they are administrators. Typical tasks may be changing passwords, setting forwarding, adding or removing aliases, and setting auto responders.
- Workgroup—Creates, deletes, and manages mailboxes within any workgroups for which they are administrators.
- Domain—Performs all functions of a workgroup administrator. In addition, they can add/remove workgroups and workgroup administrators as well as manage and brand their domain.
- Company—Performs all functions of a domain administrator in all domains within their company, and can edit their company information and suspend users. They can also add or remove domains and create and assign administrators, including Company mail, Company read only, Company token only, and Company view admins.
- Company_mail—Can view everything that a company administrator can, but can only edit mailbox settings. They cannot create or delete mailboxes or edit domain settings.
- Company_mail2 Similar to company_mail administrator, but cannot change passwords or generate login tokens.
- Company_ro (read only)—Can view everything that a company administrator can, but does not have the ability to make changes.
- Company_token_only—Can generate SSO tokens for users in any domains in their company. This is their only responsibility; they cannot view or change settings for domains or users.
- Company_view—Can view all domains in the company, and can make non-billable changes to mailboxes and domains, but does not have the ability to create or delete mailboxes or domains.