...
Server administrator: Full access to manage all aspects of the server. This role is held by the distributor and includes creating and editing user groups and roles, managing all objects, including rooms, virtual numbers, and devices. The Server Administrator has access to all server data, including logs and archives, and is responsible for backups, data recovery, security settings, and system audits.
Group administrator: Limited management rights within the company's resources. This role is performed by the dealer designated by the distributor. The Site Administrator can manage assigned resources, such as rooms and devices, view and edit data within their group and subordinate groups, and control room bookings and access to facilities. Site Administrator permissions are determined by senior administrators and are restricted by hierarchy.
User: Standard user access to a personal account. The User can confi gure their profile, view their devices and bookings, create guest passes, and receive messages. Access is limited to personal settings and interaction with shared functions without control over system parameters.
Concierge: A role for interacting with residents and guests. The Concierge manages resident groups, sends announcements and messages, controls room bookings and access to facilities, and has access to group information and devices to ensure security and communication.
Permissions Table for Each Role
The table provides a detailed overview of the access permissions and capabilities assigned to each role within the system. It helps administrators understand the specific permissions granted to roles such as Server Administrator, Group Administrator, User, and Concierge, ensuring clear visibility into each role's capabilities and limitations. Use this table as a reference to configure and manage roles according to project requirements.
...
| Expand | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
How to obtain each role
In the self-host version of the system, roles can only be assigned by the Server Administrator (distributor) or the Site Administrator (dealer). Users cannot register independently or select their own roles; all roles are assigned according to permissions set by the administrator.
...
If a user needs a role change or permission update, they should contact their administrator directly.
How to create a role
In addition to the standard roles available on the server, there may be situations where a customized set of permissions is needed. Creating a new role manually allows administrators to tailor permissions to specific needs, providing greater flexibility in managing access and responsibilities.
...
After saving, you will be returned to the main screen of the Profiles section, where all roles, including the newly created one, will be displayed. On this screen, you can edit, delete, and filter roles by name.
...
Assigning Roles to Users
To assign a specific role to a user, follow these steps:
...
After creating and configuring the profile, you will be redirected to the User Management section, where all users created on the server are displayed. Here, you can edit, delete, and filter users.
...
Independent Projects on One Server
When hosting multiple projects are hosted on the same server, the main challenge is ensuring data separation and restricted a single server, it's important to separate data and limit visibility so that administrators can only access information relevant to their own project. To address achieve this, each project must should be isolated within assigned its own designated visibility zone.
Problem Overview: Hosting independent projects on a single server can lead to potential issues if administrators have access to data from other projects. This lack of separation can cause confusion, reduce security, and make management more complex.
Solution: To restrict access and provide each project with an independent management environment, administrators must be added to the top level of their designated project hierarchy. By configuring projects this way, administrators will have a limited view of only their assigned groups, users, and devices.
Result: Once an administrator is placed at the top level of their project, they will only see the groups, users, and devices associated with their own project. This separation ensures that all data remains secure and each administrator has a clear view of only the resources they manage.
...
By configuring the server this way, administrators are added to the top level of their project's hierarchy. This ensures they can only manage their assigned groups, users, and devices, without accessing data from other projects.
This approach keeps data secure, reduces management complexity, and gives each administrator a clear view of their own project's resources.
Configuring and Managing Access Rights for Independent Projects
This section outlines the key steps for configuring and managing access rights for independent projects on a single server. If it’s necessary to separate users and resources across multiple entities (e.g., different buildings), it’s important to create separate groups and profiles for each project. This approach restricts access to data and functions, ensuring security and effective role distribution for each entity.
Step 1. Creating Projects
At this stage, you need to create the required number of groups on the server that you will interact with. Detailed instructions for creating a group can be found in the Object groups section. Once set up, your projects will appear on the main screen of the Object Groups section. (In this example, two groups are used.)
...
Step 2. Adding Users with Roles for Projects
Once you have created the groups for your projects, the next step is to add users with the required roles.
Navigate to the Users section and click the plus icon in the lower-right corner to add users. Create users with the roles of Administrator, Concierge, and User, applying the previously configured profiles to them.
When creating the Root Group Administrator role, select the profiles the administrator can manage in the Available profiles section. For example, add the Concierge and User profiles to grant the administrator the ability to manage these roles.
| Info |
|---|
For more detailed instructions on creating users, refer to the Users section or the Assigning Roles to Users article. |
After creating users with assigned roles for the first project, they will automatically appear in the Users section.
Step 3. Adding Users with Roles to the Project
At this stage, you need to assign roles to the groups within your project to ensure each role is responsible for its designated area.
Adding an Administrator
Go to the Object Groups section, where the groups you previously created will be displayed.
Select the group for which you created users and roles.
Once you have selected the group, place the Administrator at the top of the group hierarchy to grant them access to manage all subgroups.
To do this, click the arrow to the left of the group name to expand the subgroup menu.
Then, click the three dots next to the group name and select Edit.
...
In the window that opens, navigate to the Users section.
...
Click the
icon and select the user (Administrator) you created earlier for this group.After selecting the user, click the green Confirm button in the lower-right corner.
...
To save the changes and assign the user to the group, click the
Save icon in the lower-right corner.
Adding a Concierge
The process of adding a concierge is similar to adding an administrator, but their roles are assigned to other subgroups.
In the Object Groups section, click the arrow to the left of the subgroup name to expand the list of subgroups for your project.
...
In the list of subgroups, locate the required object, click the three dots next to its name, and select Edit.
...
You will then be redirected to the main Users screen. Click the
Save icon in the lower-right corner to save your changes.
Adding a User
The process of adding a user is similar to adding a concierge, except the user must be assigned to their apartment, located at a lower level of the hierarchy.
...
Once all users with their roles have been added, their permissions will be restricted to the assigned project. The administrator will only be able to manage users within their group.
Finalizing the Configuration
Apply the same settings to another project by creating new users and, if necessary, roles. This will ensure that your projects remain isolated, with no overlap, and are invisible to users from other groups.
Example of Displaying Two Projects on a Single Server
...