User roles and permissions

User roles and permissions

Miradore's Free plan allows you to invite an unlimited number of administrators to your Miradore site but inviting users with restricted access requires a Miradore Premium plan.

Miradore provides three different permissions levels: Administrator, Editor, and Reader.

Administrators

Administrator accounts have access to every feature of Miradore and can configure general system settings and user permissions. Each Miradore site must always have at least one active administrator account.

Editors

Editor accounts have otherwise the same permissions as Administrators by default, but the editors are unable to:

• • Access the Setup guide page
  • Access the Retired devices page
  • Access the Permissions, Infrastructure Diagram, or Subscription pages under the System menu
  • Configure the layout of the managed Play Store on the Applications page
  • Edit Categories, Custom attributes, Locations, or Organizations on the Attributes page
  • Edit, add, or remove tags
  • Edit dashboards on the Dashboards page
  • Edit QR code or NFC enrollment settings for Android devices on the Android Enterprise page
  • Edit patch installation settings on the Patches page
  • Edit the Blacklisted (yes/no) setting for patches
  • Import users from Active Directory on the Users page
  • Perform the Software update action on the Devices or Device page

Readers

Reader accounts have read access to most pages on Miradore, but they are unable to:

• • Access the Setup guide page
  • Access the Android Enterprise page
  • Access the Enroll device page
  • Access the Retired devices page
  • Access the Permissions, Infrastructure Diagram, or Subscription pages under the System menu
  • Edit anything or perform actions on Miradore
  • Edit My settings for their user account (they can enable 2FA and change their password though)

In addition, tagging can be used to limit Editor and Reader permissions even more so that he/she can only manage a specific group of devices. Editors/Readers are unable to see or manage devices that are outside their (tag-defined) permission level. Editor/Reader can't add or remove devices or user tags either.

How to invite a new administrator/editor/reader

1. Navigate to System > Permissions and click the green Invite user button from the top of the page.

2. Enter the email address of the new administrator you want to invite and choose the desired permission level. For the Editor level, you can define tags to further reduce their permissions.

When you're done click Invite.

3. On the last screen of the invitation wizard, you'll see a notification that tells you whether the invitation was successfully sent. You may exit by clicking Close.

4. The invited administrator receives an email with instructions on how to complete their registration.

How to remove administrator/editor/reader

Removing permissions follows the same steps as when inviting new administrators. Navigate to System > Permissions. Select users from the view and click the Delete button from the top of the page. Please note that an administrator account cannot be removed if it is the only admin account on the site.

If you're a Free plan user, consider upgrading your subscription if you're interested in inviting editor or reader accounts.