Roles and Permissions

Administrators can use roles to control the scope of operations members can perform in the enterprise. After members obtain roles, they can use the corresponding functions; after members obtain device authorization, they can view and connect to the corresponding devices in the AskLink Business Controller.

Overview

What Is a Role?

A role is a combination of permissions used to define which functions a member can use and which operations a member can perform.

Administrators can create different roles by job responsibility, such as operations administrator, standard control member, or inspection member, and assign roles to members.

What Is a Permission?

A permission is a control rule for a specific function or operation, such as whether a member can view members, manage devices, modify settings, or view logs.

The permissions a member has are determined by the roles assigned to that member.

What Is the Relationship Between Members, Roles, and Permissions?

• One member can have multiple roles;
• Each role can be configured with different permissions;
• The final permissions a member obtains through multiple roles are the union of those role permissions.

In the example above, Li Si has multiple roles at the same time, so the final permissions are: File Transfer, Add Device, and Execute Command.

Create a Role

1. Select Roles and Permissions in the left navigation bar;
2. Click the + button above the role list;
3. Enter the role name;
4. Click Confirm.

After completion, the new role appears in the role list.

Configure Permissions for a Role

1. Select the role to configure in the role list;
2. In the content area, select the permissions this role needs to have;
3. Click Save in the upper-right corner of the content area.

After completion, members with this role obtain the corresponding permissions.

Assign a Role to a Member

1. Select Departments and Members in the left navigation bar;
2. Find the target member in the member list;
3. In the Actions column, click Edit Member;
4. In the pop-up window, select roles for the member;
5. Click Confirm.

After completion, the member obtains the permissions corresponding to the selected roles.

Notes

• Role permissions determine which functions a member can use, while device authorization determines which devices a member can see;
• After a member obtains a role, the member may not necessarily see devices. The administrator still needs to authorize devices for that member;
• Modifying role permissions affects all members who have that role. Confirm the scope of impact before saving.