An Editor is a person authorized by an AGPM Administrator (Full Control) to make changes to Group Policy objects (GPOs) and create GPO templates. Additionally, an Editor can initiate the process of creating or deleting a GPO, but by default must request approval from an Approver.


Ensure that you are connecting to the central archive for GPOs. For more information, see Configure the AGPM Server Connection.


Because the Editor role includes the permissions for the Reviewer role, an Editor can also review settings and compare GPOs. See Performing Reviewer Tasks for more information.

Additional considerations

By default, the following permissions are provided for the Editor role:

  • List Contents

  • Read Settings

  • Edit Settings

  • Create Template