Paradox allows third-party system implementers (SIs) to access and configure customer accounts through a structured roles and permissions model. This enables users to manage implementations efficiently while maintaining security through restricted access to core product settings.

Use cases

• Third-Party Implementations: Grant access to external partners to configure your account without providing full administrative control.
• Scalable Management: Allow trusted admins to manage account-level settings via controlled, role-based permissions.

Best practices for implementation

• SSO Override: Use this setting for partners who do not have an identity in your company’s internal SSO directory.
• Login Access Requirement: Ensure the Login Access toggle is enabled for the user. If disabled, the user cannot log in, and the SSO Override option will be unavailable.

Configuration

Step #1: Configure the SI or partner user role

1. In the top left corner, select All Apps and then Settings.
2. When the Settings page opens, select Roles and Permissions under the Permissions section.
3. In the left panel, select Roles and Permissions.
4. Select Add New Employee Role in the upper-right corner of the section.
5. Update the following details:
   • Employee Role Name: Enter a descriptive name (recommended: Partner User)
   • Legacy Employee Role: Select the desired base role type for the partner.
   • External ID (optional): Enter an external ID for this user role, if relevant.
6. Select Create Role in the bottom right corner of the drawer.
7. The role's permissions will open on the main page.
8. If needed, enable SSO Override under the System Access Parameters section. This allows the partner to log in using Paradox-specific credentials.

1. Scroll down to the Client Setup permission and select Full Access.
2. In the upper-right corner, select Save.
3. In the warning modal, select Confirm to acknowledge that this role will have extensive access to account settings.

Step #2: Assign users to the role

1. In the left panel, select Employees and then All Active Employees.
2. In the upper-right corner of the section, select Add New Employee.
3. Enter the contact information for your partner user.
4. In the Employee Permissions section, select your newly created role from the Employee Role dropdown menu.
5. Select Save in the bottom right corner.
6. In the Update Employee Details modal, select Yes, Make the Changes.
7. Select Confirm on the security warning modal to complete the process.

System implementer and partner user experience

Once configured, the partner user can follow these steps to access your account:

1. Enter the phone number, email, or Employee ID and password, then select Sign in.
2. On the Verification Code page, enter the verification code sent via email or phone.
3. From there, they can navigate the system and access Client Setup to adjust account settings.
   • Note: In Client Setup, a banner will be visible to the partner stating that they have restricted setting access.

System implementer and partner user restrictions

To protect the integrity of your core platform setup, specific product configurations are restricted to View Only for these roles. These settings are tied the following products:

• Assessments
• Campus
• Campaigns
• Conversational Events
• Employee Communications
• Offer Management (in Forms & Offers)
• Job Management
• Conversational ATS
• External ATS Job Management
• Referrals
• Talent Communities
• Site Studio

Additionally, system implementers or partner users cannot enable or disable the following settings during partner configuration:

• NLP – Core natural language processing settings.
• Job Search – The Search Company setting within the Job Search section.