Setting up role-based access for your team

You rarely want everyone who touches MxGuard to have full control. MxGuard supports role-based access with three roles.

• Admin — full control: add/remove domains, change thresholds, manage rules and users, issue API keys.
• User — day-to-day operation: review quarantine, release/delete messages, manage rules within their scope.
• View-Only — read access to verdicts, statistics and quarantine without the ability to change anything, ideal for auditors or junior staff.

Every action taken by every role is captured in a searchable audit log, exportable as JSON or CSV, so you always have an accountable record of who released which message or changed which threshold. For MSPs, the scoping of allow/block rules (recipient, domain, customer-wide, global) pairs with these roles so a technician can be given exactly the reach their job needs and no more.