# User Levels in Entitlement Aggregation

Due to API limitations, the Identity Security Cloud Governance connector aggregates user levels in entitlement aggregation, and these levels are predefined within the connector. However, during account aggregation, the connector retrieves all the user levels assigned to the account.

Following is the list of user levels included in entitlement aggregation:

| ID | Name | Description |
| --- | --- | --- |
| HELPDESK | Helpdesk | Helpdesk access to the tenant |
| ORG\_ADMIN | Admin | Full administrative access to the tenant |
| CERT\_ADMIN | Cert Admin | Cert Administrator access to the tenant |
| REPORT\_ADMIN | Report Admin | Report Administrator access to the tenant |
| ROLE\_ADMIN | Role Admin | Role Administrator access to the tenant |
| ROLE\_SUBADMIN | Role Sub-admin | Role SubAdministrator access to the tenant |
| SOURCE\_ADMIN | Source Admin | Source Administrator access to the tenant |
| SOURCE\_SUBADMIN | Source Sub-admin | Source Subadministrator access to the tenant |
| CLOUD\_GOV\_ADMIN | Cloud Gov Admin | Cloud Gov Admin access to the tenant |
| CLOUD\_GOV\_USER | Cloud Gov User | Cloud Gov User access to the tenant |
| sp:aic-dashboard-read | Access Intelligence Center - Reader | Access Intelligence Center - Reader access to the tenant |
| sp:aic-dashboard-write | Access Intelligence Center - Author | Access Intelligence Center - Author access to the tenant |
| sp:aic-dashboard-admin | Access Intelligence Center - Admin | Access Intelligence Center - Admin access to the tenant |
| sp:ui-config-hub-admin | Configuration Hub Admin | Admin access to Configuration Hub |
| sp:ui-config-hub-backup-admin | Configuration Hub Backup Admin | Backup Admin access to Configuration Hub |
| sp:ui-config-hub-read | Configuration Hub Reader | Reader access to Configuration Hub |
| SAAS\_MANAGEMENT\_ADMIN | SaaS Management - Admin | Admin access to SaaS Management |
| SAAS\_MANAGEMENT\_READER | SaaS Management - Reader | Reader access to SaaS Management |
| das:ui-administrator | Data Access Security Administrator | Administrator access to Data Access Security |
| das:ui-compliance\_manager | Data Access Security Compliance Manager | Compliance Manager access to Data Access Security |
| das:ui-data\_owner | Data Access Data Owner | Data Owner access to Data Access Security |
| das:ui-auditor | Data Access Security Auditor | Auditor access to Data Access Security |
| idn:access-request-administrator | Access request administration | Access request administration access to the tenant |
| idn:access-request-administrator-read | Access Request Administration Read Only | Access Request Administration Read Only access to the tenant |