How to change a user’s account access level / role permission

Changing a User's Account Access Level / Role Permission

You can change the access level of a user from their profile page (click EMPLOYEES menu then click the EDIT PROFILE button), on the ACCOUNT INFO tab:

how-to-change-access-level-1.gif
click to enlarge
i
Note that, the Account Access Level is different than an Access Control Policy. Account access levels control what top-level menus and features an admin or user can access. Whereas, access control policies allow you to control the permissions settings for non-admin privileged users such as a Department Manager.

Types of Account Access Levels / Role Permissions

Teramind has several account levels / role permissions you can assign to users to limit which features and options they can access. You can change the account access level of a user from their profile. 

Administrator

The most powerful access level. They can monitor all employees, other admins, and change any settings with no restrictions.

Operational Administrator

 Has access to the following menus:

  • Time Tracking (Tracker, Tasks).
  • Behavior (Policies, Anomaly Rules).
  • Employees (with limitations, see below).
  • Computers.
  • Configure (Departments, Schedules, Access Control, Productivity Profiles, Shared Lists).
  • My Account (Subscription, Support Pin, Server & Port, Support).
  • Settings (Monitoring Settings, Integration, System Settings).
  • Monitoring Profiles (with limitations, see below).

Cannot do the following:

  • Cannot add/remove users from the Default Settings monitoring profile but can turn monitoring on/off or change the settings of different monitored components such as Screen, Applications, etc.
  • Cannot view the last login time on the Employees screen.
  • Cannot access the agent download links.

Infrastructure Administrator

 Has access to the following menus:

  • Time Tracking (Tracker).
  • Configure (Shared Lists).
  • My Account (Subscription, Support Pin, Server & Port, Support).
  • Settings (Monitoring Settings, Integration, System Settings).
  • Monitoring Profiles (with limitations, see below).

Cannot do the following:

  • Cannot add/remove other users from a monitoring profile but can turn monitoring on/off or change the settings of different monitored components such as Screen, Applications, etc.
  • Cannot access the agent download links.
  • Cannot browse any recordings.

Department Manager / Supervisor

This is a special type of permission not available under the Account Type and can only be created from the Departments menu. Please see the section Configure > Departments on the Teramind User Guide to learn more about departments.

Any employee can be assigned as a department manager. These managers can then view/manage the employees in their assigned department

i
Note that, if you change the account access level of a manager (i.e. make them an Admin, Infrastructure Admin etc.), that access level will override their Department Manager privilege. 

 Has access to the following menus:

  • Time Tracking (Employee cost, Task cost, Time records, Time cards - with limitations, see below).
  • Dashboard (Focus, Enterprise and any custom dashboards created by themselves).
  • Monitoring.
  • Risk.
  • Productivity.
  • Behavior (with limitations, see below).
  • Employees (with limitations, see below).
  • Computers (with limitations, see below).
  • Configure > Departments (with limitations, see below). 
  • Configure > Shared Lists.
  • System > Missing Users/Computers.
  • System > System Log (can only view the system log of employees in their department).
  • Can download the Revealed Agent.

Cannot do the following:

  • Cannot add/edit tasks.
  • Can’t set employee and time costs
  • Cannot create/edit behavior policies and rules.
  • Cannot add/edit any employees.
  • Cannot add/edit any computers.
  • Can only view the main Department page but cannot view the list of employees in the department, cannot create/edit departments or add/remove employees in the department)
  • Cannot create or view any access control policies.
  • Cannot create or view productivity profiles.
  • Cannot access any system settings or hidden agent download links.
  • Cannot access the My Account menu.

Employee

 Has access to the following menus:

  • Time Tracking (Tracker) - if enabled by an admin on the user's profile.
  • Monitoring (Webpages & Applications, Screen Snapshots, Sessions)  - if enabled by an admin on the user's profile.
  • Productivity - if enabled by an admin on the user's profile.
  • Can change some of their profile information such as password, email, etc.
  • Can download the Revealed Agent.

Cannot do anything else unless granted additional access using an Access Control Policy

Was this article helpful?
0 out of 0 found this helpful