User Access Rights

User Access Rights

User access rights allow you to see the user on tabs and in reports, edit the user properties, and grant access to system objects. For example, a service manager should have user access rights to configure the service structure. 

On the Access tab of the user properties, you can specify the rights this user should have to other users. To do this, select the Users item in the filter and select the required access rights to every user from the list on the left.


Access rights on the tab are divided into standard and special. All access rights from these two lists are described below.

Standard access rights

The list of standard access rights to users contains the following rights:

Access rightDescription

View object and its basic properties

Allows seeing the user on different tabs and in lists. The General and Advanced tabs are available in the user properties. The user's name is also shown in reports and in the Creator field of the object properties.

Idea
You cannot select any other access rights without this access right.

View detailed object properties

Doesn’t influence the access to the user.

Manage access to this object

Allows seeing the user on the Access tab of the properties of other users, where you can configure access to this user.

Idea
When transferring access rights, take the hierarchy rules into account.

Delete object

Allows deleting the user from the system.

Rename object

Allows changing the user's name.

View custom fields

Allows seeing custom fields (that is, not marked as administrative ones) in the user properties.

Manage custom fields

Allows creating, editing, and deleting custom fields in the user properties. Cannot be granted without the View custom fields access right.

View admin fields

Allows you to see administrative fields (that is, custom fields marked as administrative ones) on the Custom fields tab of the user properties.

Manage admin fields

Allows you to create, edit, and delete administrative fields in the user properties. Cannot be granted without the View admin fields access right.

Edit not mentioned properties

Allows you to edit settings on the Advanced tab and individual user settings (using the import tool), as well as send notices to the user from the management system.

Change icon

Doesn’t influence the access to the user.

Request reports and messages

Allows seeing the records of the user's login to the system and to other services on the Logs tab. It also allows executing reports on usersLogLogins, and Custom fields. The Custom fields table additionally requires the View custom fields access right, and the Log table, the Manage object log access right.

Edit ACL-propagated objects

Doesn’t influence the access to the user.

Manage object log

Allows executing a report on the user with the Log table. This report additionally requires the Request reports and messages access right.

View and download files

Doesn’t influence the access to the user.

Upload and delete files

Doesn’t influence the access to the user.


Special access rights

The table below lists special access rights to users.

Access rightDescription
Manage user's access rightsThe Access tab is available in the user properties, where you can grant the user access rights to system objects. The user is also shown in the properties of objects in the list of users to whom you can grant access rights.
Act on behalf of this user

Allows logging in to the system on behalf of this user, creating objects on behalf of this user, and perform all other actions available to this user. It also allows changing the user's password on the General tab of the user properties.

Change user’s general propertiesAllows changing options on the General tab of the user properties. To change the user's password, you should additionally have the Act on behalf of this user access right.

    • Related Articles

    • Access Rights

      An access right is the ability to see certain system objects and perform allowed actions with them. Trackd users may have access rights to the following macro-objects of the system: accounts and resources; users; units; unit groups; routes. Access ...
    • Users

      A user is a macro-object of the system, which has a unique name (login), password, and certain access rights to other macro-objects. Using the login and password, the user can log in to the system and control the required units (end user) as well as ...
    • Granting Access Rights

      For granting access rights to other users, you should have the following access rights: Manage user’s access rights to the user to whom you want to grant access rights; Manage access to this object to the object the rights to which you want to grant ...
    • User Properties - Access

      To work with the Access tab, you should have the Manage user's access rights and Manage access to this object access rights. On this tab, you can see and change the access rights of the user to the following types of objects: units; groups of units; ...
    • Unit Group Access Rights

      Access rights to a unit group allow the user to see this group on different lists, run reports on it, add and remove units from it, delete this group, and so on. Access rights to the group apply to all the units belonging to it. This means that when ...