¶ Managing Users and Permissions
Revision date: 21/oct/2022
MAM4PRO version: 2022.09.00
In MAM4PRO, access permissions are flexible and widely customizable, thus ensuring the proper balance of collaboration and control while assuring that your company data is safe and secure.
This management can be done on two levels:
- Permissions: allows the management of users by role groups, e.g., supervisors, operators, and editors;
- Users: allows the management of each user’s access data, such as login and password, type of permission, language, and themes.
Our scenario:
To exemplify how to take advantage of these tools, we will assume a scenario to configure. Let’s say we want to create three users, one for each of the groups below:
- Supervisors: will be able to create, edit, and delete workflows, locations, input, and output signals, etc.;
- Operators: will perform ingest, capture, and playout operations, for example, using the instances created and released by the supervisor, but cannot create, edit, or delete the instances;
- Editors: they will be restricted to viewing the assets that were generated by the operator, editing them, and saving them in their final file folders. They will also not be allowed to create, edit, or delete instances.
To achieve our goal, we will first create the permissions profiles and then add the users linking them to their respective permissions.
¶ Creating Permissions Profiles
In the “Settings > Permissions” menu, click the “Add” button (in the lower left corner).
This form is used to define which options will be available to users.
On the Menu tab, you will be able to select which menus will be available. On the Dashboard tab, choose which actions related to dashboard management can be performed. On the Widgets tab, define which widgets will be displayed.
In our case, we will give the supervisor all permissions on all tabs except for user management (menu tab), which is only allowed for administrators:
Note: the administrator profile is provided by MOG by default and has all system permissions.
Operators will only have access to the scheduler, activity, system, and environment menus:
Note: as the “Workflow Profiles” option is disabled, the workflow edit button for widgets Gang Capture, Job Control, and Player will not be displayed.
They will not be able to perform any management actions on the dashboards:
And they will have controlled access to widgets:
Let’s take a closer look at this.
As we defined earlier, operators will not be allowed to create, edit, and delete instances created by the supervisor. Therefore, it is necessary to define this in the widgets that offer these possibilities. To do so, click on the arrow positioned to the left of the widget name and then check the options that will be allowed:
Note: we recommend being careful when giving access to the “Reindexing assets” option because when performing this action, all archived assets and temporary information generated by a metadata enhancement workflow, for example, will be lost.
For the editors’ permissions, menus and dashboard management options are not required, so we left all the options on these tabs unchecked. In addition, we will only give access to some widgets with limited options for using some of them:
¶ Adding Users
In the “Settings > Users” menu, click on the “Add” button (in the lower left corner) and fill in the open form. In the permission field, select the permissions profile created earlier:
In addition, define the user’s access data, as well as the authentication type, language, and theme.
Checking the “Improve Accessibility” option will turn the Activity widget’s operations filter into more explicit icons:
To operate the MAM4PRO on touchscreens, activate the “Touch Mode” option located in the accessibility section.
If you want to allow the current user to communicate with other users associated with the same core through the web app, click on the InterCOM option and scan the QR code that will open in a popup:
Take advantage of the powerful and flexible user and permissions management options that the MAM4PRO can offer to avoid wasted time and work from the users’ day-to-day rush.