Overview: Roles within Workforce allow users to have different permissions to access different functionalities on the system. Each role has a switch to allow or restrict access to different areas of the Workforce system to any user it is assigned to.
Start from: The Configuration Dashboard.
- Select Configuration
from the main menu.
- Select Roles
from the Configuration page to open the Roles list.
Note: If you have access to multiple operators, you can select the operator to configure using the Change Operator dropdown list beneath the main Roles list.
Adding, renaming or deleting a role
- Select Roles
from above the Roles list to open the Roles Setup panel.
The Roles Setup panel shows a list of all the current roles which have been created for the system.
- Enter a name in the Add Role text field.
- Select Add
to create the new role.
- Select Edit
for an existing role to enter a new name for it.
- Enter the new name in the text field.
- Select Accept
to rename the role, OR select Cancel
to discard the change.
- Select Delete
for an existing role to delete it.
Note: Deleting a role is irreversible, and you will be prompted to confirm the action before the role is removed.
- Use
Setting up permissions for a role
Each existing role permission is listed on the Roles list page. Each entry in the list represents an individual permission for access to the functionality in the Menu and Submenu column, for the role in the Role column.
- Use
to search the list OR use Filter
to show only the permissions matching certain parameters.
Note: The search option uses all columns of the list. For example, searching for 'Administration' will show only the Users > Administration access permissions for all current roles.
- Use the switch at the end of each row to enable
or disable
access permission for the functionality in Menu > Submenu, for that role.
- Select Disable All
OR Enable All
to enable or disable every access permission currently displayed in the list.
Note: Permission changes will take effect as soon as the relevant switch is set.
When access permissions for roles are changed, any users assigned those roles will immediately be able to access, or be denied access to, the relevant functionality.
Smarthub-Specific Permissions
To support Smarthub device configuration while maintaining security, the following permissions have been introduced:
- PIN Configurator: Enables users to switch identification modes (Code and PIN or Code only).
- Fingerprint Configurator: Grants access to activate fingerprint backup, reset fingerprint files, or format them.
- Basic Configurator: Allows users to check for updates and upload logs.
- Core Configurator: Provides access to advanced configurations, including:
- Setting the Smarthub to kiosk mode.
- Activating offline mode.
- Triggering synchronization.
- Configuring automatic suspension time.
- Resetting the device.
- Accessing security credentials functionality.
Assigning Smarthub Permissions
All security permissions for Smarthub are located under the Other Permissions group and can be assigned in the same way as others:
- Navigate to Configuration > Roles in Workforce.
- Locate the desired security permission under the Other Permissions group.
- Assign the permission to a role by toggling the button on the far right of the role's row.
Once a security role is assigned, users can access the device configuration screen by logging in with their username and password. Each user will only see actions allowed by their assigned roles.
Notes: Security permissions do not overlap, meaning each role grants access only to its specific features. However, multiple permissions can be assigned to a single user for broader access.