Access Control for Administrator Users
Teramind comes with several built-in administrator accounts such as Administrator, Infrastructure Administrator, Operations Administrator, etc. This article, How to change a user’s account access level / role permission describes how to change an admin type and what each type of account level is entitled to.
It is important to note that admin accounts cannot be included in Access Control policies. If you wish to apply policies to such accounts, their roles must be changed to a regular employee type.
Access Control for Other Users
On Teramind, you can also create Access Control Policies that apply to other non-admin users. This way, you can give a regular employee such as a supervisor or department manager privileges to view/access/edit information of other users in their team.
When configuring these policies, ensure that you assign either users or computers, but not both, to avoid potential visibility issues and proper functionality.
You can create access control policies from the CONFIGURE > Access control menu:
Create a new access control policy (or edit an existing one).
Give it a name, select the privileged users (for example, regular Employees, Department Managers) the policy will apply to. Note that, you cannot add any admins in this field. If you need to include an admin, you will have to change their role to that of a regular employee. However, you can add an admin in the target users list.
Select the target users the the privileged user will have access to.
Select the Play/View/Edit items the privileged user will be able to Play/View/Edit/Access.
Check out the Configure > Access Control Policies section on the Teramind User Guide to learn more about access control.
Access control policies aren't meant to be used on a Depart Manager on the Teramind Dashboard. Otherwise, it will affect the department manager access.
For better control and precision, consider adopting Role-Based Access Control (RBAC). RBAC allows for assigning permissions based on roles (e.g., admin, manager, employee) and can streamline management, especially for temporary staff or projects.