Overview
Access Control determines what each dashboard user can see and do in Teramind: which dashboards, reports and menu items they can open, which settings they can change, and which employees, departments and computers their access covers. You manage it from Configurations > Access Control.
There are two types of access control policy:
List Access Control Policy: Grants permissions over specific resources directly to the employees or departments you choose in the policy. Use it when the same users always need the same access, such as letting one user view productivity reports for the IT department.
Role Access Control Policy: Defines a reusable set of permissions, including management features such as configuring agents, without naming users or resources. You assign the role from each employee's profile and choose there which resources it covers. Use it when several people need the same kind of access over different resources.
Note: Every permission in a policy applies to every resource in it. If a user needs different permissions for different resources, add a separate policy for each combination.
Create a List Access Control Policy
This example creates a policy that lets Dustin Miller view productivity and session reports for the IT department.
Go to Configurations > Access Control.
Click New Policy at the top right.
Under Information, enter a Policy Name, such as “IT Productivity Reports”.
Optionally, enter a Policy Description, such as “View productivity and session reports for the IT department”.
Set Type to List Access Control Policy.
Under Grant Privileges, open Employees or Departments and select who gets this access, such as “Dustin Miller”. You can select employees, departments or Everyone.
Under Permission, type in the Search box to find a permission, then check it. For example:
Search “productivity” and check View productivity report.
Search “sessions” and check View sessions report.
The count below the list shows how many permissions are granted, for example “2 permission(s) granted by this policy”.
Under Resources, set Type to Employee, Computer or Department, such as Department. Then open Select Resources from the list below and choose which ones the permissions apply to, such as “IT”.
To add another set of permissions and resources to the same policy, click + New Policy next to the Policy 1 tab.
Click Save at the top right. In the Confirm changes dialog, enter your password and click Save.
Your new policy now appears in the Access Control list, with the users or departments it’s granted to shown under Privileges to. In this example, it shows Dustin Miller. To find it quickly, type part of the policy name in the Filter box above the list, such as “IT Productivity”. The list then shows only matching policies.
Note: A List Access Control Policy can’t include management permissions. Use a Role Access Control Policy for those.
Create a Role Access Control Policy
This example creates a role that lets help desk staff manage Teramind agents, such as changing an agent’s password, for the resources they’re assigned.
Go to Configurations > Access Control.
Click New Policy at the top right.
Under Information, enter a Policy Name, such as “Helpdesk Account Manager”.
Optionally, enter a Policy Description, such as “Manage employee accounts and reset passwords”.
Set Type to Role Access Control Policy. The Grant to section now reads “Assigned from the employee’s profile, with the resources it grants access over.” There’s no Resources section, because you choose the resources when you assign the role.
Under Permission, open each tab (View, Play, Edit, Management features and Access Widgets) and check the permissions the role needs. You can also type in the Search box to find a permission. For example:
On the View tab, check View agents listing and agent details page.
On the Management features tab, check Configure agents and Change agents password.
The count below the list shows how many permissions are granted, for example “3 permission(s) granted by this policy”.
Click Save at the top right. In the Confirm changes dialog, enter your password and confirm.
Your new policy now appears in the Access Control list, with Role policy shown under Privileges to. To find it quickly, type part of the policy name in the Filter box above the list, such as “Helpdesk”. The role doesn’t grant anything until you assign it to employees, as described in the next section.
Assign a Role Access Control Policy from an Employee’s Profile
This example assigns the Helpdesk Account Manager role to Aymon Cousteau, with access over the Sales department.
In the left menu, click Employees.
In the Name filter box above the list, type part of the employee’s name, such as “Aymon”. Then click the employee in the results, such as Aymon Cousteau.
On the employee’s profile, click Edit at the top right. The Edit Profile panel opens.
Click the Access Control tab. Under Assigned Roles you’ll see the default Employee role. If no other role is assigned yet, you’ll see “No access policy is assigned to this employee.”
Click + Add role.
Click the Select Role dropdown. Type part of the policy name in the search box, such as “Helpdesk”, and select the policy, such as Helpdesk Account Manager.
Click Select targets. The role is added to the list. Until you add a target, you’ll see the warning “This policy grants nothing until a target is added.”
Under Grant access to, click Add target. Type part of a resource name in the search box, such as “Sales”, and select it, such as Department · Sales. You can select more than one target, or select Everyone to cover all resources.
Press Esc or click outside the dropdown to close it, and check that the target appears under the role.
Click Apply Changes.
In the Confirm changes with your current password dialog, enter your password and click Confirm. The Edit Profile panel closes when the change is saved.
The employee now has the role and its permissions over the resources you chose. In this example, Aymon Cousteau has Helpdesk Account Manager over Department · Sales. To check it, open the employee’s profile, click Edit and go to the Access Control tab, where the role and its targets appear under Assigned Roles. You can also open the policy in Configurations > Access Control: under Grant to, Privileges to lists each employee the role is assigned to, with their resources.
Notes:
Multiple roles: An employee can have more than one role. Each one appears separately under Assigned Roles with its own targets.
Changing or removing a role: To change the resources, edit the Grant access to field under the role. To take the role away, click Remove next to it. Then click Apply Changes and confirm with your password.