Learning about Role Management

Role Management is the Ambiance module where the roles that are assigned to Operators are configured. A role is a grouping of rights that authorizes access to Ambiance features and functions. By assigning a role to an Operator, you are granting access to all of the rights selected for the role. Operators can only see and use the features and functions that are authorized by their assigned role. Role Management is only accessible to operators assigned the Administrator or Site Configurator role.

Predefined and custom roles

When assigning roles to Operators, you can use the predefined roles or create custom roles. Ambiance includes the following predefined roles based on typical organizational requirements:

• Administrator
• Site Configurator
• Front Desk Agent
• Staff Manager

The rights selected for predefined roles cannot be modified.

Custom roles are based on one of the predefined roles and are entirely configurable. The exception is that Role Management is not accessible to any custom role. When a custom role is modified, the changes apply to all Operators who are assigned the role.

Before changing the rights associated with a custom role, generate a Roles & Rights report to determine any Operators who may be affected.

Rights

There are two types of rights in Ambiance:

• System Rights are categorized by module so that you can authorize an entire module or discrete functions within a module. Reports is a category of system rights. When the Reports category is authorized for a role, any Operator assigned the role can generate all report types.
• Key Rights are categorized by key type so that you can authorize all commands for a key type or discrete commands for each key type. Staff Keys is a category of key rights. When the entire Staff Keys category is authorized for a role, any Operator assigned the role can perform all of the discrete functions:

• Make replacement key
• Make unblock key
• Make resequence key
• Make cancel key
• Make additional key
• Make block key
• Make new key

For both system and key rights, authorization can be enabled at the category level or individual right level. When the category is selected, access is granted to all individual rights in the category.

Roles control user interface display

The features and options that display in Ambiance depend on the rights selected for the role assigned to the Operator. For example, if the Operator that is currently logged in does not have rights to access the Property Builder module, the module does not display. Likewise, if the only right selected in the ELO (Electronic Lockout) key right category is Make Additional Key, the only time ELO displays as an option when selecting a credential class is when the Operator is making an additional key.