Roles
- Karyna Kompaniiets
- Vladislav Turzai (Unlicensed)
In the BAS-IP Link system, roles define a set of permissions and rules for different user categories. The system includes four primary roles: Company Administrator, Site Administrator, Concierge, and User, each with unique settings for server interaction — from managing groups and licenses to personal housing. Additionally, you can create custom roles to tailor permissions to your project’s needs.
Standard roles on the server
The server provides predefined roles with specific functions designed for various system usage scenarios. In this section, we will explain the purpose of each role, their key capabilities, and the conditions for obtaining them.
Company Administrator — manages company resources, creates subgroups, assigns administrators, and distributes licenses. This role configures resources and defines access for subordinate roles like the Site Administrator. To obtain this role, users must first select "Dealer" or "Installer" during registration and then contact our sales department, where the role will be assigned manually.
Site Administrator — manages all assigned resources within their hierarchy, including rooms, devices, and groups. Has full access to view and edit data, configure system settings, and control bookings and access permissions. Assigned manually by the Company Administrator or automatically during registration by a dealer or installer.
User — has limited access to a personal account with no permissions for system-level management. Can configure their profile, view available devices and bookings, create guest passes, and receive messages. Assigned manually by the Company Administrator or Site Administrator.
Concierge — manages interactions with residents, including sending messages, making and receiving calls, and controlling bookings and access. Has access to group-level information and assigned devices to support communication and maintain security. Assigned manually by the Company Administrator or Site Administrator to the responsible personnel.
Roles allow for convenient distribution of permissions and areas of responsibility when using the server. This can be compared to positions in a hierarchical system: administrators oversee operations at the server level, while users manage their personal resources and tasks.
Permissions table for each role
This section provides a detailed overview of the permissions assigned to each role in the system. The table below lists all roles with their respective capabilities, marked with a plus (+) for available permissions and a minus (–) for restricted ones.
Creating a custom role
In addition to standard roles, the system allows you to create custom roles with a unique set of permissions tailored to your project’s needs. You can fine-tune access, define functional limitations, and allocate rights for specific tasks or users.
Stages of creation:
Go to the Profiles tab in the User Management section.
Click on the plus icon in the bottom-right corner of the page.
In the pop-up window, enter a name for the new role.
Add a description for the role if needed.
In the Available Profiles section, select the roles that the new role will be able to edit.
In the Permissions section, select all the necessary permissions for the new role.
Click on the save icon in the bottom-right corner to apply the changes.
A user cannot assign permissions that exceed their own. The available permissions and editable profiles depend on the current user access level.
Creating a role by copying
In addition to the standard role creation process, you can copy an existing role on the server and customize it to suit your needs. This significantly reduces setup time, especially when the new role requires similar settings to an existing one.
Stages of creation:
Go to the Profiles tab in the User Management section.
Click on the copy icon to the right of the role name.
In the opened window, enter a name for the new role.
Add a description for the role if needed.
In the Available Profiles section, select the roles that the new role will be able to edit.
In the Permissions section, add or remove the necessary permissions for the new role.
Click on the save icon in the bottom-right corner to apply the changes.
Assigning a role to a user
To assign a role to a user, you first need to create a user and configure a group where users with assigned roles will be added. Groups help organize users and simplify the management of their access rights.
Learn more about creating and configuring groups in the Object Groups guide.
Stages of creation:
Go to the Object Group section.
Use the ▶ to select the desired group level and click on the ••• to the right of the group name.
Open the user creation, or user editing window.
Click the Profile field and select the desired role from the list.
In addition to the assigned role, user permissions also depend on the position in the group hierarchy.