This page will walk you through BSN.Cloud permissions system using the scenario of a hypothetical chain of donut shops. You will learn how to create and edit Custom Roles for a digital-signage system of 25 shops spread out over a large geographical area.
The roles outlined here are used as examples to explain how to conceptualize and create a Custom Role.
In order to create a Custom Role, you will first need to check the Show Advanced Security Settings and Enable Custom Roles Management check boxes located in the Advanced section of the Account page.
Overview
Your company has 25 shops in multiple states, and the central office has many more employees. Though BSN.Cloud’s default System Roles have worked well up until this point, they are no longer able to serve a large group of users with diverse roles and responsibilities.
Creating Custom Roles
Since there are nearly 70 individual permissions, it is often easiest to base a Custom Role on one of the preexisting System Roles:
Click the Account button at the top right of the page.
Navigate to the Permissions tab on the right-hand side of the page.
Click the Create New Roles button beside the Roles List.
Enter a name and (optional) description for the Custom Role.
Check the Copy Permissions From checkbox to base the permissions of your Custom Role on a preexisting role. As long as you have the advanced settings enabled on the Account page, you will be able to change all copied permissions.
If you do not copy permissions, you will need to set up permissions manually by dragging and dropping the role name into each Operations category. When you do this, the permissions will be automatically set to “Allow.” If you don’t add the role to an Operations category, the permissions for that category remain set to “Deny” by default.
Example Custom Roles
Accountants
The accountant in charge of accounts payable needs to keep track of the invoices that are automatically generated by BSN.Cloud. He is not involved in the digital signage network in any other way.
In this case, it would be best to create a Custom Role without copying permissions from a default System Role. As stated above, all permissions are set to “Deny” by default if you choose not to copy permissions from another role. Therefore, all you need to do is create a new role and leave the Copy Permissions From box unchecked. You can then drag the new Custom Role into the Subscription category.
Presentation Creators/Live Text Creators
The responsibility for creating and editing menu boards is now split between two employees. The graphic designer is still in charge of uploading new editions of the menu boards, but the Live Text feeds used for special deals are maintained by an employee from the marketing department. The graphic designer integrates Live Text into the menus, but does not update the Live Text herself. The default Creators role no longer reflects how their responsibilities are divided.
The easiest way to deal with slight variations in System Roles is to use the Copy Permissions From feature when creating Custom Roles. In this case, you can create both a Presentation Creators and a Live Text Creators role based on the default Creators role. To create Presentation Creators, copy permissions from the Creators System Role and deny full control to Live Text Feeds. To create Live Text Creators, copy permissions from the Creators System Role and deny full control to Content, Dynamic Playlist, and Presentation.
Senior Network Managers
You need to expand the role of the Network Manager so that he can add and edit schedules in addition to maintaining the network of BrightSign players. He is not involved with the daily activity of menu revisions and updates, so you don’t want him to have control of adding or removing the presentations on a schedule.
You will need to modify the default permissions of the Network Manager in a more minute way than allowing or denying “full control” of a category. On the permissions page, click the arrow symbols next to the operations categories to expand the list of permissions. These expanded menus enable you to allow or deny specific actions within an operations category. Enable “Add Presentation” and “Remove Presentation” in the Schedule category. Since BrightAuthor automatically creates a new schedule upon adding an existing one, you will also need to enable “Create Schedule” in the Schedule category.
Because actions like adding and editing schedules are a composite of different operations, you will also need to enable “Change Schedule” in the Group category and “Add Presentation” and “Remove Presentation” in the Presentation category. You have now expanded the permissions of your Network Manager without having to enable full control of an operations category.