Let the platform do the work

User Administration


All Sugar System Administrator Users are automatically Discover admins and can use the information in this documentation to assign Discover-specific roles to users.


To view the Admin section, you must have access to Discover and have a Discover role of Admin.

User Administration with SugarIdentity

Discover syncs its user list with the SugarIdentity provider configured with your Discover application, which populates the first name, last name, email address, title, and phone number for each SugarIdentity user. Adding, editing, and removing users must be done in SugarIdentity.

By default, the User Type in Sugar determines the default role in Discover:

  • System Administrator Users are automatically assigned the Admin role in Discover. 
  • Regular Users are automatically assigned the No Access role in Discover. 

To gain access to Discover, regular Sugar users must be granted a Discover role in the Discover interface. 

Adding, Editing, and Deleting SugarIdentity Users

To add, edit, or delete SugarIdentity Users, a Sugar admin user must navigate to SugarIdentity. For more information on creating users in SugarIdentity, please refer to the User Management documentation in the SugarIdentity Guide.

User Administration in Discover

To manage users in Discover, click on your profile icon in the top right corner of the Discover interface, then select "Admin" to access the Manage Users page.
Open Admin

Syncing Users to Discover

To sync the user lists between SugarIdentity and Sugar Discover, click the Refresh button in the top-right corner of the Manage Users page. You may also access SugarIdentity by clicking the Manage Users in Cloud Settings button.

discover manage users

Assigning Discover Roles to SugarIdentity Users

To set Discover roles for users, navigate to the Manage Users page and alter the roles using the dropdown menu in the column on the right.

The following are the Discover roles:

  • NoAccess: Users with this role are denied access to the Discover application and have no access to view Discover via a Sugar dashboard. This role is automatically given to all Sugar users with a User Type of Regular user. Sugar users with Status field set to "Inactive" are automatically set to the "NoAccess" role and hidden from the Admin screen.
  • Admin: Users with this role have the abilities of a User role and the added ability to edit default SugarCRM datasets and administer users. The role is automatically given to Sugar users with a User Type of System Administrator.
  • ReadOnly: Users with this role have access to view public reports, share reports, and drill link through reports. These users see a simplified user interface that hides items to which they do not have access.
  • DashletUser: Users with this role have access to Discover reports shared through a Sugar Dashboard via a Discover dashlet.
  • User: Users with this role have the ability to view public reports, build reports, and share new reports.

Note: These roles dictate a user's permissions to access, modify, and create Discover reports. Sugar roles and teams are not respected by Discover reports, and therefore you should not give Discover access to anyone who should not have access to all Sugar record data.