Role permissions

Each permission controls specific actions users can perform within 247connect. By default, all permissions are set to Disabled when you create a new role. To enable a permission, select Enabled from the drop-down list.

Notes:

  • When you clone a role, the new role inherits its permissions from the original role.

  • Permissions with the Account Blue icon showing a single figure connected above three smaller figures in a hierarchical structure. icon only have an effect when applied at account level.

  • Changes to role permissions take effect when assigned users log out and log back in. Updates may take up to five minutes to apply.

Permission categories

The Role permissions tab displays permission categories in a tree view on the left side of the window.

Role permissions tab showing account, managed device and on-demand device permissions, with all permissions set to Disabled.

Select a category in the tree view to quickly navigate to that section of permissions.

All available permissions are displayed on the right side of the window and can be scrolled through independently of the selected category.

Use the search field to quickly find a permission.

Account permissions

Account

Account permissions. It displays five permission settings, each with a description and a drop-down menu set to Disabled. The permissions are: Manage account settings, Manage billing details, Manage device licences, Manage on-demand licences and Manage user licences. Each row includes a red "X" icon indicating the permission is disabled and a drop-down arrow for changing the setting. Blue icons next to each permission indicate account-level access.

Manage account settings: Update the 247connect account settings.

Manage billing details: Manage the account's billing information.

Manage device licences : Move managed devices into or out of the Unassigned device group.

Manage legal agreements: Manage updates to the terms of service and privacy policy.

Manage on-demand licences : Assign and unassign on-demand licences to other users.

Audit log

Audit log permissions. It shows the View audit log permission, described as allowing users to view audit log entries in the portal. The permission is marked with a blue account-level icon and is currently set to Disabled, indicated by a red "X" and a drop-down menu.

View audit log: View audit log entries for 247connect.

Device groups

Device groups permissions. It shows four permissions: Delete device groups, Manage device assignment rules, Manage device group settings and Manage device groups. Each permission includes a description explaining its function. All permissions are currently set to Disabled, indicated by red "X" icons and drop-down menus.

Delete device groups: Remove existing device groups.

Manage device assignment rules: Create, edit, and delete device assignment rules.

Manage device group settings: Configure the device group settings.

Manage device groups: Create and edit device groups.

Roles

Roles permissions. It includes three permissions: Delete roles, Manage role assignments and Manage roles. Each permission has a brief description and is marked with a blue account-level icon. All are currently set to Disabled, indicated by red "X" icons and drop-down menus.

Delete roles: Remove roles that are no longer needed.

Manage role assignments: Assign and unassign roles for users at both the account and device group levels.

Manage roles: Create and edit roles.

User groups

User groups permissions screen showing options to delete or manage user groups, both set to Disabled.

Delete user groups: Remove user groups that are no longer needed.

Manage user groups: Create and edit user groups.

Users

Users permissions. It lists four permissions: Delete users, Edit users, Invite users and Manage user 2FA. Each permission includes a short description and an account-level icon. All permissions are currently set to Disabled, shown with red "X" icons and drop-down menus.

Delete users: Remove users from the Web Portal.

Edit users: Edit the details of other users.

Invite users: Invite new users to join via email.

Manage user 2FA: Manage the two-factor authentication (2FA) of other users in the Web Portal.

Note: Users can only disable other users' 2FA.

Managed permissions

Managed devices

Managed devices permissions. It lists permissions such as clipboard access, installer access, chat, delete, edit, file transfer, messaging, moving, remote control, screenshots and sending Ctrl+Alt+Del. All permissions are currently set to Disabled, shown by red "X" icons and drop-downs.

Note: These permissions apply only to the managed devices within the device groups assigned to the user.

Access clipboard: Access the clipboard of managed devices.

Access installers: Access to the installers for managed devices in the Web Portal.

Blank the screen: Blank the screen on managed devices during a session.

Chat: Chat with managed devices.

Delete devices: Remove a managed device from the Web Portal.

Edit device details: Modify the editable details of a managed devices, for example, the display name.

File transfer: Transfer files directly to managed devices.

Message: Send messages directly to managed devices.

Move devices: Move managed devices between device groups.

PowerShell: Run PowerShell commands on managed devices.

Registry Editor: Use the Registry Editor for managed devices.

Remote control: Remote control managed devices.

Screenshot: Take a screenshot of managed devices.

Send Ctrl+Alt+Del: Send Ctrl+Alt+Del to managed devices.

Task Manager: Use the Task Manager for managed devices.

On-demand permissions

On-demand devices

On-demand devices permissions. It includes permissions: Access clipboard for devices, Chat with devices, Elevate sessions, File transfer to devices, Message devices, Remote Control Devices, Screenshot devices, Send Ctrl+Alt+Del to devices, Use PowerShell for devices, Use Registry Editor for devices and Use Task Manager for devices. Each permission has a description and an account-level icon. All are currently set to Disabled, indicated by red "X" icons and drop-down menus.

Access clipboard: Access the clipboard of the on-demand device.

Chat: Chat with on-demand devices.

Elevate sessions: Elevate their session with an on-demand device.

File transfer: Transfer files directly to on-demand devices.

Message: Send messages directly to on-demand devices.

PowerShell: Use PowerShell for on-demand sessions.

Note: Requires Elevate sessions permission.

Registry Editor: Use the Registry Editor for on-demand devices.

Remote control: Remote control on-demand devices.

Screenshot: Take a screenshot of on-demand devices.

Send Ctrl+Alt+Del: Send Ctrl+Alt+Del to on-demand devices.

Note: Requires the Elevate sessions permission.

Task Manager: Use the Task Manager for on-demand devices.