What is an Operator?

An Operator is the top-level role in Versa Titan Portal’s provider hierarchy – the role that creates a provider’s first store administrator account and the only role that can add a private or multitenant RAC/RAS gateway for a provider organization. Operators sit above store administrators, MSPs, and resellers, with no account above them but their own privileges.

Key takeaways

• Operators sit atop the entire Titan Portal provider account hierarchy.
• Only an Operator can create a provider chain’s first store administrator account.
• Operators alone can add private or multitenant RAC/RAS gateways.
• No Titan Portal account can grant privileges above its own level.
• The Operators dashboard displays only when logged in as one.

On this page: Why it matters · How it works · What can an Operator do? · Operator & Versa · FAQ

Why is an Operator important?

Providers running Versa Titan Portal – Versa itself, telcos, and top-tier partners – need one account that can bootstrap everything beneath it without ad-hoc support requests. Every account created afterward is capped at its creator’s own privileges, so the top of that chain matters: an over-permissioned or compromised top-level account can eventually affect every store administrator, MSP, reseller, and customer hanging off it. The Operator role is Versa’s answer – a provider-level identity that starts the multi-tier channel without handing broad device configuration access further down.

It also carries a capability nobody downstream gets: standing up private and multitenant SASE gateways for a provider organization, shared infrastructure work rather than customer-facing configuration. Concentrating that at one role keeps infrastructure changes deliberate and auditable.

What is an Operator?

In Titan Portal, every account belongs to a role, and roles nest in a strict hierarchy: Operator, then store administrator, then managed service provider (MSP), then reseller, with enterprise administrators and users at the bottom managing individual customer organizations. An Operator sits at the top of the provider side of that chain.

Logging in as an Operator surfaces an Operators dashboard – visible only to Operators – listing the other operator accounts on the system, alongside the Organizations dashboard for creating customers and the Users dashboard for managing accounts beneath it. Operators are typically a Versa or top-tier partner identity, not an end-customer one: the role seeds the channel and performs the infrastructure actions, like adding gateways, reserved above the store-administrator tier. An Operator cannot hand out privileges its own account lacks.

What can an Operator do?

An Operator’s distinguishing actions fall into three groups. Account creation: only an Operator can create the first store administrator account in a provider chain – store administrators can then add others beneath them – and it can also create MSP, reseller, and enterprise accounts directly, always at or below its own privilege level. Organization and user management: like store administrators, MSPs, and resellers, Operators create customer organizations and manage users, roles, and privileges from the Users dashboard, including locking accounts and reviewing audit logs.

Infrastructure: Operators hold a capability no other role has – adding a private or multitenant RAC/RAS gateway for a provider organization, provisioning shared SASE gateway capacity before any customer requests a device. These groups are why the Operator account is a deployment’s trust anchor, not a customer-facing role.

Operator & Versa

Titan Portal’s Operator sits above the customer-facing hierarchy most partners interact with: store administrator, MSP, and reseller accounts, each capped at the privileges of the account that created it. When an Operator, or any role in that chain, creates a new customer, Titan Portal assigns a VD Customer Role on the underlying Versa Director node – TenantDashboardOperator, TenantOperator, TenantSecurityAdmin, or TenantSuperAdmin – linking the Titan-level role to Director’s own tenant permissions.

Worth flagging: “Operator” means something different in Concerto. There, Service Provider Operator and Enterprise Operator are read-only account types – the opposite end of the privilege spectrum from Titan Portal’s Operator, the most privileged role in its own hierarchy. The name is shared across portals; the position in each hierarchy is not.

Frequently asked questions

Who can create a store administrator account in Titan Portal?

Only an Operator. Store administrators, once created, can add other store administrators, MSPs, and resellers beneath them, but the first store administrator in any provider chain always traces back to an Operator account, since no account can create a role above its own level.

Does “Operator” mean the same thing in Concerto as in Titan Portal?

No. In Titan Portal, Operator is the single top-level, most-privileged provider role in the whole hierarchy. In Concerto, by contrast, Service Provider Operator and Enterprise Operator are read-only account types – the least-privileged tier available, sitting opposite the full-access Administrator types.

Can an Operator create a reseller account directly?

Yes. Operators, store administrators, and MSPs can all create reseller accounts directly from the Users dashboard; an Operator need not go through an intermediate store administrator or MSP first. Whatever privileges are granted still cannot exceed the creating account’s own.

What is the Operators dashboard?

It is a left-menu screen listing every operator account configured on the system, alongside their status and privileges. It displays only when logged in as an Operator – other roles, including store administrators and MSPs, never see this menu item at all.

What can only an Operator do that no other Titan Portal role can?

Two things: create the first store administrator account for a new provider deployment, and add a private or multitenant RAC/RAS gateway for a provider organization. Both are infrastructure-level actions that no store administrator, MSP, or reseller account is permitted to perform.

More on Operator roles

If you want to learn more, these are sources we trust.

Related terms

If you’re reading about Operators, these are worth looking at next.