MCS from version 1.3.0
Table of Contents
Related Article Titles
Roles Configuration, Create New Role, Create Roles, Set Roles, Roles Management, Users Roles Management.
Overview
Each user in MCS must have a role that defines their permissions. Roles specify the actions users are allowed or restricted from performing, as well as the features and settings accessible to users with that role. This article explains how to create new roles. Additional information about role configuration functionalities is available here.
Create a New Role
Click the Add button to add a new role.
Enter a name for the role in the Label field
Note:
The label must be at least 3 characters long and can include letters or numbers.
Assign access groups in the Resources settings:
Select access groups for each position and label:
In the Access Groups column, click the relevant row to open the dropdown menu.
Check the box next to the desired access group name (label).
Click the checkbox next to All to select all the existing access groups.
Unselect all to restrict access to all MCS devices and features.
Select a position for each label in the Common settings:
In the Position column, click the relevant row to open the dropdown menu.
Select the desired position.
Select a position for each label in the Network settings:
In the Position column, click the relevant row to open the dropdown menu.
Select the desired position.
Assign access groups in the Devices settings:
Select access groups for each position and label:
In the Access Groups column, click the relevant row to open the dropdown menu.
Check the box next to the desired access group name (label).
Click the checkbox next to All to select all the existing access groups.
Unselect all to restrict access to all MCS devices and features.
Note:
Access groups cannot be assigned to Common, Network, Network Interfaces (in Devices settings), or System Management settings, as these represent global settings or features within MCS.
Note:
Due to the structure in version 1.3.0, only Admin permissions are available for Network Interfaces under Devices. In the table, it appears twice: once for Admin and once for Viewer. However, in this version, you cannot select the position or assign access groups, as it represents a global setting in MCS.
Assign a single position to all System Management sub-sections.
Note:
System Management sub-sections have unified permissions (Admin, Viewer, None) that apply to all functionalities. You can assign one position type to all sub-sections by clicking the Admin, Viewer, or None buttons located near the System Management title.
Impact of Access Group Configuration on Role-Based Resource/Device Creation
When an Access Group is assigned to a specific position to a resource (or a device) for a role, any user with that role will automatically have resources (or devices) they create assigned to the same Access Group. Users cannot remove or modify this Access Group assignment.
Example:
An admin creates a role called ROLE POD A and configures access to the GROUP POD A Access Group for devices.
When UserA, assigned the ROLE POD A role, logs in and creates a new device, the GROUP POD A Access Group will be automatically assigned in the Groups field. The user will not have the option to remove or change this assignment.
