Users and roles
Several people of the same company can use the panel, each with their own account. Every user has a role, which decides what they can see and do. Users, roles and the data of the company are in the Organization group of the menu.
To manage users and roles you need a role that allows it, such as Owner or Administrator.
The users
Organization › Users lists the people of your company who use the panel, with Role, Status and Last login.
The Owner is the main account of the company. It is not changed from this page: the Owner changes their own data from their profile, and your provider can change the Owner.
Adding a user
New user asks for:
| Field | What to write |
|---|---|
| Username | The name the person signs in with |
| Name | The name of the person |
| Their address: it receives the invitation and the links to reset the password | |
| Mobile | Optional |
| Role | What they can do (see below) |
| Password | How the person will get the password |
For the password there are two ways:
- Send a link to choose the password: the person receives an email and chooses the password at the first sign-in. Until then they are Invited. This is the way to prefer: only they know the password.
- Set the password now: you write it and tell it to the person.
The states of a user
| State | What it means |
|---|---|
| Active | Signs in normally |
| Invited | Has not chosen the password yet |
| Suspended | Cannot sign in, for example during an absence |
| Disabled | Cannot sign in |
A suspended or disabled user is stopped at the next page, even with a session open.
Changing a user
Edit, on the row of a user, opens their data, role and state.
- Send the invitation again, for an Invited user who did not receive the email or lost it.
- Turn off the second factor, for a user who lost the phone and the recovery codes: they sign in with the password only and can turn it back on from their account.
- Delete the user: the user can no longer sign in. It cannot be undone.
You cannot change the role or the state of your own account: another administrator has to.
When a person leaves the company, delete or disable their user: do not leave active accounts of people who no longer work with you.
The roles
A role is a set of functions, each Granted or Denied as a whole: for example CSP · View logs, CSP · Manage the devices and the quarantine or Manage users and roles. Organization › Roles shows the roles and how many users have each.
The system roles
They are the same for every customer and cannot be changed:
| Role | What it can do |
|---|---|
| Owner | The main account, with every function |
| Administrator | Every function |
| Operator | Works on the services, but without deletions, exports and restores |
| Auditor | Read only, besides managing their own account |
The functions of these roles are updated with the new versions of the panel.
Custom roles
If a system role does not fit, make one of your own:
- Duplicate, on a system role, makes a copy to change;
- or New role, with a Name, a Description and the Access to the functions.
You can grant only the functions you have yourself. The functions marked as includes operations that cannot be undone, such as deletions and restores, should go only to those who really need them. Every role can always see and change its own account.
A change to a role applies at once to every user who has it. A role assigned to some users cannot be deleted: first give those users another role.
Example: someone who only reads the logs
For a consultant who must read the logs but not change anything, the Auditor role is enough. If they must also download them, duplicate Auditor, grant in the copy the function CSP · Export logs and give the consultant the new role.
The company data
Organization › Company data holds the data of your company, shared by all its users: Company name, VAT number, Tax code, Contact person, Contact email, Telephone, Fax, Website and the address.
Every user sees them. Only the administrators of the account can change them, with Save the company data.
- The VAT number is written in the international form, with the country code in front, for example
IT01234567890. If you write it without, the panel adds the code of the country chosen. - Telephone and Fax take the international prefix chosen next to the number.
- A Website written without
https://gets it.