Local users and access permissions are handled via Role-Based Access Control (RBAC). Userful’s RBAC revolves around creating predefined roles and then assigning users to those roles.
Roles are a collection of permissions that you can assign to a user group; this allows the privileges associated with that role to be performed on applications within UCC. Broadly speaking, these are broken down into Control Center, Command and Control, and User Management tasks.
Before implementing RBAC you should evaluate the needs of the users in your organization and, based on the level of access they require to perform their duties, group users into roles that satisfy those requirements. It is a best practice to limit users to the minimum required role necessary for them to complete their assigned tasks.
To get started with Role Based Access Control, click “Users” in the left side menu of the Userful Control Center. Initially the User Accounts table will be empty, while the list of groups will include three legacy group names: Admin, Operator and Restricted. These predefined roles belong to the operating system level and cannot be modified with granular permissions. It is recommended to start creating new groups from scratch.
Here is a breakdown of the existing groups:
ADMIN - Full control, same access as the first user or system administrator
STAFF - Must be created from Settings screen. Intended for legacy Public Computing deployments. Staff users can affect individual station logins and view interactive sessions (Cloud Desktop, Web Browser), but cannot edit sources, create video walls, or use Command & Control
OPERATOR - For use with Command & Control exclusively. Users with this group can start, close, and move sources, and also recall predefined Layouts, but cannot edit sources or Layouts
RESTRICTED - This Group has access to all functions of UCC and C&C except User Management/RBAC.
Though Users are listed first, it is recommended to create Groups first, as users must be assigned to and have their permissions defined by Groups.
Click the Add Group button
Enter Group Name & Description
Enable the required permissions for the group under each system application and click OK
The animation below shows an example of adding a new group with view-only access to Command & Control.
Next we will add a User, and assign them to that same Group.
Click Add User.
Create a User Name and Password.
Assign the user to one of the Groups.
Resource Groups are the source groupings created in Mapping. This is helpful when a user must be restricted in their access to certain sources and/or Zones. Users with access to a particular Resource Group will only be able to see those Sources and whatever Displays or Zones have been assigned to them by users with higher access rights.
This allows granular control of the elements on the left-side menu of Control Center
Create, update and delete items in Events
View-only access to Events
Admin access to the Displays section
View-only access to the Displays section
Admin access to the Support section
View-only access to the Support section
Admin access to the Mapping section
View-only access to the Mapping section
Admin access to the Settings section
System settings view
View-only access to the Settings section
The Command and Control Module provides you with a drag and drop GUI to resize and arrange sources in real time within the video wall canvas.
Access to audio setting of sources
Create, update, and delete layouts
Ability to switch between existing layouts
Activating existing sources from the list
Source interactive viewer
Ability to interact with sources (where supported)
Create, update, and delete sources from the list
Minimize, maximize sources and move them within the canvas
View-only access to the C&C module
The User Management module allows access to the tool we are reviewing now.
Create, update, and delete user accounts
Users & Groups View
View-only access to the groups and users page
Create, update, and delete groups
Control room Layout Switcher
Mobile interface to switch between saved Command & Control layouts
Control Room Supervisor Dashboard
Interface to view Control Room walls generated from multiple Peer systems