The roles that can be assigned to users include the right of access to applications (webmail, contacts, etc.), the right to use specific features (creating external identities, enabling email auto-forward, etc.) or administration rights to delegate certain management responsibilities (users, domain, etc.).

Administrators are only able to delegate a right they themselves have, except for access to applications or features: e.g. even if they don't have a mail account an admin can enable "Mail and Contacts" to users they administrate, or allow them to create external identities or mail forwarding, even if they don't have those rights themselves.

Users can be assigned the following roles:

Administration

Access to Applications

General

Mail

Cloud

To find out more about managing these rights, go to the dedicated pages Users and Delegated Administration