Adding a User

Navigation:  Managing the Account > Set Up > Users / Internal Users >

Adding a User

Previous pageReturn to chapter overviewNext page

 

Overview

 

Create the necessary standard/support users with different roles (= different access rights) to access MCL-Mobility Platform.

Users with administrative roles such as account administrator or site manager can only be created in this "Users" sub-module (at account level).

 

Step-by-step

 

1. To create a new user, go to the Admin Dashboard's "Control Panel", click Set Up Button and Users Button .

 

User Management Page_Account

 

2. Click Add Button_Header to access the "New User" page.

 

New User Page Edit_M

 

3. The page is already in edit mode. Start by filling in the options available in the left panel. The fields marked with an asterisk are mandatory.

 

Username *

Define a username to be entered by the user when he logs in to the MCL-Mobility Platform account/site.

Once defined, the username CANNOT be edited.

 

Note

The username MUST comply with the following rules:

Minimum of 4 characters.

Maximum of 30 characters.

Special characters allowed:   "-"   "_"   "."   "@"   "#"

Spaces are NOT allowed.

Do NOT use "admin" as a username ("admin" = internal reserved username)

 

Parameters

First Name *

Enter the user's first name.

Last Name *

Enter the user's last name.

Email *

Enter the user's email.

 

If you enable the "Email" method for the Two-Factor Authentication (in the "Security" tab), you will receive the email with the required code on this address.

Mobile Phone

Enter the user's mobile phone number.

 

If you enable the "SMS" method for the Two-Factor Authentication (in the "Security" tab), you will receive the SMS with the required code on this number.

If this field is left empty, the "SMS" option for Two-Factor Authentication (in the "Security" tab) will not be active.

Phone

Enter the user's telephone number.

Language

Select the language to be used by the new user from the drop-down.

Description

If relevant, add notes regarding the new user.

Custom Fields

Field 1

This section is hidden, by default. To expand it, click the arrow to the right:

 

User Custom Fields

 

If required, fill in one or both fields with information on the new user.

Field 2

 

4. If required, click Left area hidden (panel's upper right corner) to hide the panel and have an expanded view of the "User Access" and "Security" tabs. To view the panel again, click Arrow_Expand (upper left corner).

 

5. Proceed to the "User Access" tab. The fields marked with an asterisk are mandatory, meaning, they must always contain information.

 

New User User Access Tab_Account_M

 

6. Select the new user's type from the corresponding drop-down. There are 2 types of users to choose from:

 

Standard - This is for the typical user within the organization that will require day-to-day access to the MCL-Mobility Platform account.

Support User - This is for a user that is not a part of the organization and that will only access your MCL-Mobility Platform account to provide Support to the organization.

 

Note

Make sure you select the correct user type because once the new user is saved, it is NO longer possible to change it.

 

 

7. Select the new user's role from the corresponding drop-down. There are 9 different user roles to choose from.

The options that follow will be adapted to the role you choose in this drop-down.

 

Role

Access Rights

Account Administrator

Has full access to the account and its sites.

Site Manager

Has full access to the site(s) he is assigned to as Site Manager.

Site Supervisor

Can access all operational sub-modules within the site(s) he is assigned to. Does NOT have access to the site's setup.

MDM Manager

Can access all sub-modules related to the device and application management of the site(s) he is associated to.

Device Manager

Has access to the sub-modules related to device management of the site(s) he is included in.

Operator Manager

Has access to the operator related sub-modules of the site(s) he is assigned to.

Deployment Manager

Has access to the sub-modules that handle device groups, configurations and deployments of the site(s) he is associated to.

Configuration Manager

Can only access the applications/configurations related sub-modules of the site(s) he is included in.

Custom User

Can have access to the operational sub-modules you choose for this user within the site(s) he is assigned to.

 

New User User Access Tab_Account2_M

 

8. In the "Site(s)" section, select the site(s) to be associated to the current user. Check the "Site Selection" link below.

 

TIP

If the "Site(s)" section is collapsed, click the arrow to the right to expand its content.

 

User Sites 1

 

hmtoggle_plus1Site Selection

 

 

NoteThis step does NOT apply to users with an account administrator role because this role has full access to the account and its sites.

 

 

New User User Access Tab_Account3_M

 

The "User Access" tab, now, displays the selected site(s).

 

If necessary, you can:

 

click Delete Sign to delete the corresponding site from the list.

execute a bulk deletion by checking the box next to the "Site Name" column so all listed sites are selected (this activates the Bulk Delete_Button_Conf Value button) and click Bulk Delete_Button_Conf Value.

 

Site Bulk Deletion

 

Either action (single/bulk deletion) requires you to confirm the deletion by clicking the corresponding Confirm red button big button.

 

9. If you have selected the custom user role for the new user, you must select which modules he can access, in the "Module Access Rights" section. This will apply to all the previously selected site(s).

Proceed as described in the "Access Rights Selection" link below.

 

TIP

If the "Module Access Rights" section is collapsed, click the arrow to its right to expand its content.

 

Access Rights

 

New Custom User_User Access Tab_Account_M

 

hmtoggle_plus1Access Rights Selection

 

NoteThis step does not apply to the other roles - the account administrator has full access and all the other roles have predefined rights which become available for consultation in this section once a role is selected in the corresponding drop-down. You can check the listed user rights but you CANNOT edit them.

Ex: The "Module Access Rights" section of a configuration manager role which does NOT have editable access rights.

 

User Access Tab_Config Man. Access Rights

 

10. Once you have added the sub-modules you want the custom user to access, you will be able to edit those sub-modules and corresponding operations he can perform.

 

New User_Access Tab_Filled In_M

 

a. If necessary, you can delete added sub-modules:

click Delete Sign to delete the corresponding sub-module from the list.

execute a bulk deletion by checking the box next to the "Module" column so all listed sub-modules are selected (this activates the Bulk Delete_Button_Conf Value button) and click Bulk Delete_Button_Conf Value.

 

User Access Rights Bulk Deletion

Either action (single/bulk deletion) requires you to confirm the deletion by clicking the resulting Confirm red button big button.

 

b. If you want to edit the default rights of a listed sub-module, open the corresponding drop-down in the "Rights" column and check/uncheck the intended rights.

 

User Access Tab_Custom User3_AD

 

You can use the search box to look for a specific right.

Click outside the drop-down or the X button to close the drop-down.

 

11. Open the "Security" tab.

 

New User Security Tab_Account

 

This tab informs you that an email will be sent to the email address defined in the left panel so the user can set up a password - it is the new user that sets up his own password, NOT the account administrator creating the user. See Initial Password Setup.

 

12. If required, define the time frame for the new user's access to the MCL-Mobility Platform account (= when the user can log in).

If no time period is defined, the new user will be able to log in to the account whenever necessary.

 

TIP

For security reasons, we recommend defining an access period for Support users (= users outside the organization that should only access the account for support purposes). You can adopt the suggested time frame (a 5-day access period) or define a more appropriate one.

 

Access Period

From...Till...

Enter the start date/time for user access in the "From" input field and an end date/time in the "Till" input field.

You can enter the start and end dates/times manually (if so, use the given format for date - "DD/MM/YYYY" - and time - "HH:mm" OR  use the Date button 2 and Time button buttons to select the intended date in the corresponding window and the intended time in the corresponding drop-down.

See Details on the Use of the Date/Time Buttons ("Security" tab).

 

If the new user is a Support user, the "Access Period" will suggest a start date based on the current date and an end date set for 5 days later.

 

13. Define the methods that should be available to the user to execute a Two-Factor Authentication.

If you only check one method, the user will have to apply it plus his username/password for the login procedure.

If you check more than one method, the user will be able to choose one of those methods along with the username & password.

 

Two-Factor Authentication

SMS

Only available if the user has a mobile phone number defined in the left panel.

Check this option so the user can choose to use the code provided via SMS (plus the username/password) to log in.

Email

Check this method to make it available to the user when he logs in - he will be able to select this method and use it along with the username/password.

The required code will be sent to the email address defined in the left panel.

Authenticator Application

Check this option so the user can choose the authenticator application method (plus the username/password) as part of the Two-Factor Authentication to log in.

Once this is applied (= changes are saved) an email will be sent to the user with instructions for the configuration of the authenticator application.

For more info, see To Set Up the Authenticator Application.

 

 

Note

If you do NOT check any of the options, the Two-Factor Authentication will NOT be activated and the new user will only need the password to log in to the MCL-Mobility Platform account/site.

 

12. Once you have filled in/checked the required options in the left panel and tabs, click Save Header Button_2 to apply.

 

The page will be set to view mode with the information you added.