The User admin module contains the functions required to administer users within the organization tree, which can consist of one or many organizations. User admin is made up of Users, Roles, and Security groups.

On-Road IoT uses security groups and roles as follows:

• Users are placed into a security group.
• Permissions and access rights are assigned to the security group through roles.
• Users inherit the rights assigned to their security group.

If a group of users all need common access to a function, apply the permissions to a security group and add the users as members, rather than applying permissions to every user individually.

• The security group determines what can be accessed, such as assets and drivers. The security group shown above gives access to a group of assets only.
• The role unlocks the permissions and dictates what actions can be carried out on those assets or drivers, for example viewing and editing asset details.
• The user is the person within the security group who accesses the assets and performs the actions, for example editing an asset's details.

For example, a security group is created with access to assets, and a role is created with permissions to access and edit assets. Individual users are added as members of the group. The users inherit the security group's permissions, so they all have access to the assets and permission to edit them. This means that when a group of users all need common access to a function, you only need to apply permissions to the security group instead of to each user.

Best process to create users

1. Create the roles.
2. Create a security group.
3. Assign a role to the security group.
4. Create the users.
5. Add users to the security group.

When you create a user, security group, or role, you specify where it sits in the organisational structure, which determines who can see it.

Note: An entity lower down in the tree can't view an entity higher up in the tree.

Example: setting up Fleet Tracking access

1. Create a role and specify the permissions it will have. Example: create the role Basic Tracking User with access and update permissions for the Fleet Tracking module. Tip: If you administer multiple organizations, select the level at which this role will be accessible.
2. Create a security group, specify what it has access to, and assign the role to it. Example: create the security group Fleet Tracking - Mark's Salon, specify which assets in the tree its users can see, then assign the Basic Tracking User role. This gives the group's users access to view the assets in the selected organization. Tip: If you administer multiple organizations, select the level at which the security group will be accessible.
3. Create a user and assign them to the security group. Example: create user John and assign him to the Fleet Tracking - Mark's Salon security group. Tip: If you administer multiple organizations, select the level at which the user will be accessible.

Result: John can access the Fleet Tracking module and perform access and update actions within it.

RECOMMENDED READING

Add role

Add security groups

Edit a security group

Create a user account