Last updated on July 19, 2019

User roles and access in Appspace

Add and manage users and user groups within Users in the Appspace menu.

A user must belong to at least one user group, and can be a member of more than one user group, which will give the user multiple access points to content, spaces, and networks. The users and user groups are listed according to the selected network. When you select a user group, users who belong only to that user group are listed. For each user listed in the selected network or user group, the roles that the user has inherited, the groups the user belongs to, and the user’s last known server login activity are listed as well.

When you select a listed user, the ‘Delete user’ and ‘Assign user group’ buttons become available. Similarly, when you select a user group, the Edit button becomes available.

User groups

User groups are scoped at the account level, but can be configured to have access permissions to specific networks. As a user is granted inherited group roles based on group membership, a user who belongs to multiple groups can also switch to a different network based on the group membership, automatically inheriting the permission and role according to the selected group.

Each user group also has its own default Library, which can be enabled or disabled. Therefore a user with access to multiple user groups will also have access to all the default libraries of these user groups, regardless of which network they belong to.

User roles

The following are the list of roles in Appspace:

Portal Administrator:

The Portal Administrator is a system administrator with full access to all settings, accounts, and networks in Appspace. The Portal Administrator also has full access to all networks in multiple accounts in a multi-tenancy environment.

Note

Only applicable to on-premises deployments.
Account Administrator:

The Account Administrator has full access to all accounts and networks in Appspace, but does not have access to system settings. The Account Administrator also has full access to all networks in multiple accounts in a multi-tenancy environment.

Note

Only applicable in on-premises with multi-tenancy deployments.
Account Owner:

The Account Owner is the administrator of one master account with full access to and visibility of all networks, users, groups, channels, and content, within the account. The Account Owner has full access to all networks in a single account in a multi-tenancy environment.

When you signup for an Appspace account, this is the role your user account is given. This user role is best suited for stakeholders in the corporate environment.
Network Administrator:

The Network Administrator can create and manage a network structure, users, user groups, devices, and device groups, and has visibility of the network properties within a network and its sub-network.
Content Administrator:

The Content Administrator manages all content, channels, and widgets within a network and its sub-networks assigned to him.

The Content Administrator also assigns specific advanced channels and widgets to a Content Manager (to edit), and approves or rejects requests made by the Content Manager for content updates to widgets.

Important

To assign Network Administrator or Content Administrator roles, please go to Devices > Networks instead, as the permissions for these roles are added directly to a network.
Content Producer:

The Content Producer adds and manages all content items in the Library of his group. The Content Producer has access to the network and sub-networks assigned to him.

This role is best suited for Content Editors, Graphic designers, Advertising personnel in the corporate environment
User:

All users who accept an Appspace user invitation, are registered as a standard user by default, The standard user will not have any access to the console, until an administrator (Portal Administrator/Network Administrator/Account Owner) assigns roles to this user.

However, the user will be able to view all channels and content assigned to him or his user group, on the Appspace App.

This user will also inherit roles from user groups or networks assigned to him by the administrators, however, will not have access to a sub-network.

Channel and Channel Group Specific Roles

These users roles provide a degree of workflow approvals for channels, channel groups, and content within these channels, and can only be assigned to a user with access to the Library.
- Publisher
  
  The Publisher approves changes, edits content, and updates settings, and has full control of the channel and the channel properties.
  
  Note
  
  Some users are automatically added as a publisher when they inherit the full access from the account, network, or user group. Clicking on the user that was automatically added will provide more information on the inheritance.
- Editor
  
  The Editor has the ability to edit content in the channel, but may require approval.

The following table details the features in the Appspace console that are accessible to the different user roles:

Access to	Portal Administrator	Account Administrator	Account Owner	Network Administrator	Content Administrator	Content Producer
Channels	✔	✔	✔	✔	✔	✔ ²
Library	✔	✔	✔		✔	✔
Devices	✔	✔	✔	✔
Users	✔	✔	✔	✔
Device Tasks	✔	✔	✔	✔
Alerts	✔	✔	✔
Reports	✔	✔	✔	✔
App Configuration	✔	✔	✔	✔
Settings	✔
Cards	✔	✔	✔		✔
Downloads	✔	✔	✔	✔
Deployments	✔
Extensions	✔
Configuration	✔
Server License	✔

Note

¹ A user will not have any access to the console, unless he is assigned a specific role by the administrator. He will also inherit roles from user groups or networks assigned to him, however, will not have access to a sub-network.
² Only channels assigned to the Content Producer.