Managing user permissions

Each SC//AcuVigil™ user has one role, and the role sets what the user can see and do in the dashboard. Assign each user the role with the least access they need for their work. Users with the Admin or Support Manager role can change a user's role at any time.

Some tasks aren't part of any customer role, because Scale Computing does them as part of the managed service: installing and removing applications, changing most application settings and alerts, adding and changing firewall policies, configuring switches, and adding, editing, moving, or deactivating sites. To request any of these, contact Scale Computing Support. Open a ticket in the SC//AcuVigil dashboard, email team@scalecomputing.com, or call (512) 687-7401.

SC//AcuVigil platform permission levels

The following table summarizes the SC//AcuVigil roles and the permissions each role is granted. For more detail, see Additional role details.

Some permissions apply to specific SC//AcuVigil applications:

  • AcuLock lets you lock out specific functionality across your sites.
  • Remote access applications, such as Remote Passport and Remote Commander, open PCI-compliant remote support connections between a site's point-of-sale (POS) system and the POS vendor's support center.
Role/PermissionAdminInstallerSupport
Manager
Customer
Help Desk
StaffVendor
CSR
Viewer Support
Associate
Viewer+Remote
+VPN
Viewer+
Remote
Viewer
Register devicesXXXXXXX*---
Edit devicesXXXXXX----
Assign DHCP pool IPs to devicesXXXXXX----
View device policiesX-XXX-----
View the contents of a device policyX-XX------
Activate remote access appsXXXXX-XXX-
Create AcuLock requestsXXXXX-----
Confirm AcuLock requestsX---------
Restart a VPN tunnelXXXXX-XX--
Modify switch port security settingsX-XXXX----
Create credentials for authenticated scansX-X-------
Manage users at the companyX-X-------
Edit user notificationsX---------
Activate Scale Computing™ edge security devices (ESDs)XX--------
Restart a modemXX--------
Restart a switchXXXXX-----
Manage application reportsX---------
Delete photos on a location tileX---------
Edit some application settingsX---------
Edit and delete site groupsX---------
Run speed testsXXXXX-----
Assign the Unrestricted policy on a deviceX---------
Add the User History display to a user's profileX---------
Create and edit support ticketsXXXXXXXXXX
View locations and site-level informationXXXXXXXXXX

* Viewer Support Associate can register devices only by using a device registration template.

All roles, including Viewer, can view locations and site-level information and create support tickets. A user's role applies at every site they can see, including sites in child companies and partner sites. See Company structure and site access. The Contact role has no dashboard permissions; see Contact.

Additional role details

Admin

Description: This role provides the most control over the platform.

Access: This role grants the following permissions.

  • All permissions granted to all other roles
  • Manage users at the company, including creating, editing, unlocking, and deleting users
  • Edit user notifications
  • Manage application reports, including creating, editing, and deleting reports sent to other users or third parties
  • Create and confirm AcuLock application requests
  • Delete photos on a location tile
  • Edit some application settings
  • Edit and delete site groups
  • Assign the Unrestricted policy to a device at a location
  • Add the User History display to a user's page

Installer

Description: This role grants the required permissions for the installation of a location.

Access: This role grants the permissions for the following actions.

  • Activate Scale Computing ESDs
  • Register and edit devices
  • Assign DHCP pool IPs to devices
  • Activate remote access apps (for example, Remote Passport and Remote Commander)
  • Restart a switch or modem
  • Restart a VPN tunnel

Support Manager

Description: This role grants permissions needed to manage support teams effectively.

Access: This role grants the permissions for the following actions.

  • All permissions granted to the Customer Help Desk role.
  • Manage users at the company, including creating, editing, unlocking, and deleting users. A Support Manager can't assign the Admin role.
  • Create credentials for authenticated scans

Customer Help Desk

Description: This role grants basic permissions for troubleshooting issues at a location.

Access: This role grants the permissions for the following actions.

  • All permissions granted to the Staff role.
  • View device policies and their contents

Staff

Description: This role grants full operational control with additional capabilities.

Access: This role grants the permissions for the following actions.

  • Register and edit devices
  • Assign DHCP pool IPs to devices
  • Modify switch port security settings
  • View device policies (but not their contents)
  • Restart a VPN tunnel
  • Run speed tests on a location tile
  • Activate remote access apps (for example, Remote Passport and Remote Commander)
  • Create AcuLock application requests

Vendor CSR

Description: A custom role for vendor customer service representatives.

Access: This role grants the permissions for the following actions.

  • All permissions granted to the Viewer Support Associate role.
  • Register and edit devices
  • Assign DHCP pool IPs to devices
  • Modify switch port security settings

Viewer Support Associate

Description: A custom role for vendor support representatives.

Access: This role grants the permissions for the following actions.

  • All permissions granted to the Viewer+Remote+VPN role.
  • Register a device using a device template

Viewer+Remote+VPN

Description: This role grants advanced remote permissions including VPN control.

Access: This role grants the permissions for the following actions.

  • All permissions granted to the Viewer+Remote role.
  • Restart a VPN tunnel

Viewer+Remote

Description: This role grants advanced remote permissions.

Access: This role grants the permissions for the following actions.

  • All permissions granted to the Viewer role.
  • Activate remote access apps (for example, Remote Passport and Remote Commander)

Viewer

Description: This role provides basic viewing permissions.

Access: This role grants the permissions for the following actions.

  • View locations and site-level information
    • Network information
    • Devices and switches
  • View app information
  • Activate some apps (For example, GVR Passport)
  • View notes and documents
  • Create and edit support tickets
  • View and create network system reports
  • View and create device reports
  • View tank logs and create reports
  • View users within their company

Contact

Description: A person kept on record for your company who doesn't use the dashboard.

Access: This role has no dashboard permissions. Contacts don't sign in.