User Permissions
- Damien Challen
m usertoken
Here are two videos to help Administrators see the process of Managing a New User at a Site or Realm.
Managing Realm User Accounts
This covers the initial process of creating a new user at the realm level and showing relevant permissions. It details the user permissions and what each will do and how a Workforce Management account is triggered and its activation.
Managing Site User Accounts
This covers the additioanl site based permissions that correspond when a worker is given permissions at one or more sites withing a realm. It also covers the different permissions that can be enabled for site specific functions.
Managing Realm User Permissions for Client Admins
Video showing how to Create Realm Users and manage permissions.
Also shows how a Workforce Management Account is triggered for that new Realm/Site user.
Managing Site User Permissions for Client Admins
Video showing how Site Users permissions are added to a worker
Creating User Accounts
The below tables shows standard permissions for various user accounts.
| Version 3 Only (Client Portal Integtation) | |
| Version 2 & 3 | |
| Version 2 Only (No Client Portal Integration) |
- Optional Configuration Setting
NOTE: * Optional configuration for the ability "Can Log Persons In and Out" requires that the site/realm has that feature enabled in the database. Enabling this will allow ANY mobile app user with "Can Log Persons In and Out", to modify workers login. Only enable if specifically required.
REALM ACCOUNTS
| User Type | Super User | Standard |
| Can Use Onsite |
|
|
| Realm Access Level: Data Viewer / Data Editor | Data Editor | Data Editor |
| Can View Foreign Data From: Own Employer / All Employers | All Employers | All Employers |
| Can Represent Concos in Own Portals: |
| |
| Can Represent Employers: Own Employer / All Employers | All Employers | All Employers |
| Analytics Report Role: Manager / Supervisor / User | ||
| Can View SMS Review Results: |
| |
| Can Manage User Accounts: |
| |
| Can Access Financial Reports: * Not Currently Used | ||
| Can Block Cardholders: |
|
|
| Can Create Certs: | ||
| Can Assign Certs: |
|
|
| Can Authorise Assigned Certs: | ||
| Can Create Realm Roles: | ||
| Can Assign Realm Roles: |
|
|
| Can Create Competencies: |
| |
| Can Approve Site Competencies: | ||
| Can Assign Competencies: |
|
|
| Can End Employment: |
|
|
| Can Print Cards: |
| |
| Can Edit Realm Settings: | ||
| Can Edit Admin Notes: | ||
| Can Download Files: |
|
|
| Can Upload Files: |
|
|
| Can Access Private Data: |
|
|
| Can Access Sensitive Data |
| |
| Can Edit Incomplete Actions: | ||
| Can Process Escalated Actions: | ||
| Can Create Corrective Actions: | ||
| Can Process Corrective Actions: | ||
| Can Action Corrective Actions: | ||
| Can View Corrective Actions: | ||
| Can Process Pending Data: |
| |
| Can Endorse Pending Assessments: * Not Currently Used | ||
| Can Process Pending SMS Reviews: * Not Currently Used | ||
| Can Manage Classroom Training: |
|
|
| Can Manage Online Training: |
|
|
| Can Manage Assessments: |
| |
| Can Manage Merge Templates: | ||
| Can Perform Id Checks: * Not Currently Used | ||
| Can Perform Global Search: *issued by Pegasus account managers only | ||
| Can Manage Social Security Number | ||
| Mobile App Rights | ||
| Can Use Mobile App |
|
|
| Can Perform Cardholder Role Audits |
|
|
| Can search by Cardholder Name, Company and DOB |
|
|
| Can Manage Emergency Events |
|
|
| Can Send SMS for Emergency Events |
|
|
| Broadcasting Rights | ||
| Can View All Broadcasts |
|
|
| Can Send Email Broadcasts | ||
| Can Send SMS Broadcasts | ||
| Other Rights | ||
| Can Make Online Bookings | ||
| Can Process Online User Requests | ||
SITE ACCOUNTS
| User Type | Mobile App User | Supervisor | Super User | Full Administrator |
| Site: | As Required | As Required | As Required | As Required |
| Can Use Onsite |
|
|
|
|
| Data Access Level: Data Viewer / Data Editor | Data Viewer | Data Editor | Data Editor | Data Editor |
| Can View Foreign Data From: Own Employer / All Employers | No Employers | All Employers | All Employers | All Employers |
| Can Represent Employers: Own Employer / All Employers | No Employers | All Employers | All Employers | All Employers |
| Analytics Report Role: Manager / Supervisor / User |
|
| ||
| Can View SMS Review Results |
| |||
| Can Manage User Accounts |
|
| ||
| Can Access Financial Reports: * Not Currently Used | ||||
| Can Block Cardholders |
|
|
| |
| Can Log Persons In And Out* Requires Editor Access |
|
|
|
|
| Can Create Logpoint Messages |
|
| ||
| Can Edit All Logpoint Messages |
|
| ||
| Can Create Certs | ||||
| Can Assign Certs |
|
| ||
| Can Authorise Assigned Certs | ||||
| Can Create Cert Keys |
| |||
| Can Assign Cert Keys |
|
| ||
| Can Create Roles | ||||
| Can Assign Roles |
|
| ||
| Can Create Competencies | ||||
| Can Assign Competencies |
|
| ||
| Can Create Access Keys |
| |||
| Can Assign Access Keys |
|
| ||
| Can Associate Contractors |
|
| ||
| Can Associate Employees |
|
| ||
| Can End Employment |
|
| ||
| Can Print Cards |
|
| ||
| Can Manage Safety Selections |
|
| ||
| Can View Breathalyser Reports |
|
| ||
| Can Edit Site Settings | ||||
| Can Manage Site Alerts |
| |||
| Can Configure Logpoints |
| |||
| Can Edit Admin Notes |
| |||
| Can Download Files |
|
|
| |
| Can Upload Files |
|
|
| |
| Can Access Private Data |
|
| ||
| Can Access Sensitive Data |
| |||
| Can Edit Incomplete Actions * Not Currently Used | ||||
| Can Process Escalated Actions * Not Currently Used | ||||
| Can Action Corrective Actions * Not Currently Used | ||||
| Can View Corrective Actions * Not Currently Used | ||||
| Can Process Pending Data |
| |||
| Can Process Pending SMS Reviews * Not Currently Used | ||||
| Can Endorse Pending Assessments | ||||
| Can Manage Crews |
|
|
| |
| Can Manage Classroom Training |
|
| ||
| Can Manage Online Training |
|
| ||
| Can Manage Assessments |
|
| ||
| Can Manage Merge Templates | ||||
| Can Perform Id Checks: * Not Currently Used | ||||
| Can Perform Global Search: *issued by Pegasus Account Managers only | ||||
| Can Login/Logout Assets |
|
|
| |
| Can Approve Assets | ||||
| Can Manage Social Security Number | ||||
| Mobile App Rights | ||||
| Can Use Mobile App |
|
|
|
|
| Can Perform Cardholder Role Audits |
|
|
|
|
| Can search by Cardholder Name, Company and DOB |
|
|
| |
| Can Mange Emergency Events |
|
|
| |
| Can Send SMS For Emergency Events |
|
|
| |
| Can Manage Assets |
|
| ||
| Broadcasting Rights | ||||
| Can View All Broadcasts |
|
|
|
|
| Can Send Email Broadcasts | ||||
| Can Send SMS Broadcasts | ||||
| Other Rights | ||||
| Can Make Online Bookings | ||||
| CAn Process Online User Requests | ||||