In order to ensure only users who need it have access to the Administration Console, you must first assign a user an admin role. The role assigned also defines what changes that user can make.
Mimecast provides several default roles for you to choose from. It is also possible to create custom roles should the need arise.
Only the Super Administrator of the account can assign a role with Protected rights.
Assign a Role