DOCS-1489: BSN.Cloud Roles and Permissions Guide

BSN.Cloud offers a robust set of security and permissions features that allow you to protect your content and maintain the efficiency of your digital-signage system—no matter how large it gets. These security features are scalable: you can choose exactly how complex you want your permissions system to be depending on the needs of your organization.

This page describes the BSN.Cloud permissions system and how to use default System roles. Custom roles and object permissions are described here and here.

Permissions Overview

You can view the permissions of a user or role while logged into BSN.Cloud.

Operation permissions are listed in BrightAuthor:connected under Admin > Roles. It displays whether the user or group is permitted to carry out a certain action. Every possible user action in BSN.Cloud is listed here, divided by category.:

The permissions for any object are accessible through the object Properties (under Security), For example, you can select the Network, Content, or Presentations tab, chose a player, content, or presentation, and change the permissions as shown below:

System Roles

This section will introduce you to common applications of various System Roles. These default roles are great for BSN.Cloud accounts with a small amount of users who have clearly defined roles and responsibilities within the organization.

Overview

You are the systems administrator for a small chain of five donut shops located around the city. The chain has just replaced all of their chalkboards used for menus, special offers, and announcements with digital displays powered by BrightSign players, which are linked to the company’s BSN.Cloud account. There are many employees who need to use the network in order to keep the store menus and special offers up-to-date. You are faced with several personnel and security challenges when configuring the network, all of which can be solved using the System Roles provided with every BSN.Cloud account.

Assigning Roles

1. Click the Account button at the top right of the page.

2. Navigate to the Users and Roles tab on the right-hand side of the page.

3. Click the role to which you wish to add the user.

4. Drag and drop a User Card from the User List into the gray field under Assigned Users.

Using System Roles

Administrators

In order to keep everything running smoothly, you want to make sure that, as the systems administrator for the account, you are the only one who can add or delete users. If other users have full permissions, they might accidentally delete a user, add a user who is not a member of the company, or change the permissions settings for a user or role.

Being assigned to the Administrators role gives you access to all the features offered on BSN.Cloud. This is the only role that allows you to edit the account status of other users: as a member of Administrators, you can add new users, delete existing users, and assign users to different roles; furthermore, you can create and edit Custom Roles, a feature that will be explained in the Intermediate section of this document.

The first user of a BSN.Cloud account will automatically be assigned to the Administrators role. If you are not the first user on your account, you will need to have the user who is assign you to the Administrators role.

Creators

The company employs a graphic designer to create the digital menus for the stores. She is also frequently updating the content and layout of the menus, so she will be logging into the company’s BSN.Cloud account often. She doesn’t know which menu will be displayed where, nor is she in charge of deciding how the devices and groups should be organized. You don’t want her to accidentally delete a group or reassign a device while she is uploading content. 

The Creators role will give the graphic designer complete control of content, including presentations, dynamic playlists, and Live Text feeds. She will not have the ability to view or change schedules, groups, or devices. This role is best suited for those tasked solely with creating content for BrightSign players.

General Managers

The co-owners of the company want to log in to the network whenever they wish to check that pricing and product information is correct. They also want the ability to change, reassign, or reschedule presentations at any location.

Assigning the co-owners to the General Managers role gives them full control of content creation and distribution. The only permissions they won’t have are the user and account features that are unique to Administrators. 

Network Managers

Another systems administrator is assigned to maintaining all of the BrightSign players, as well as purchasing and setting up additional players when a new store location is opened. He is also tasked with periodically clearing the network of old presentations and drafts.

The Network Managers role gives him control of the company’s digital-signage infrastructure: a user assigned to this role can add, remove, maintain, and group together networked BrightSign players. In addition, he can view and delete (but not add or edit) certain kinds of content such as Dynamic Playlists, Live Text feeds, and presentations. 

Publishers

Members of the marketing department determine when promotions and deals will be announced, as well as what day of the week certain specials will be offered.

Being assigned to the Publishers role, the marketing department can schedule when and where BrightSign presentations will be played. They also have the ability to upload content. Otherwise, they do not have access to content that is uploaded to the company’s BSN.Cloud account.

Viewers

There are other members of the company who are not directly involved with the digital signage system, but who may need to view presentations, schedules, playlists, or logs as part of their job.

Users who are assigned to the Viewers role can view almost all aspects of a digital-signage system: content, groups, hardware statuses, and schedules. However, they cannot affect anything on the company’s BSN.Cloud account.