Access Needed to Manage Computers

EmpowerID controls access to computer operations through Management Roles. To work with computers, users must be assigned to the appropriate roles based on the actions they need to perform.

Management Role Prefixes

Management Roles in EmpowerID use prefixes that indicate their function:

• UI – Grants access to specific user interface elements and workflows. Example: UI-Computer-Object-Administration provides access to computer management interfaces.
• VIS – Grants visibility to specific objects in EmpowerID. Example: VIS-Computer-All allows users to see all computer objects.
• ACT – Grants the ability to manage specific objects. Example: ACT-Computer-Object-Administration-All enables creating, updating, and deleting computer objects.

Management Roles for Computer Administration

The following table lists the Management Roles that grant computer management capabilities:

Management Role	Access Granted	Role Type
ACT-Computer-Object-Administration-All	Create, update, and delete all computer objects	Activity (ACT)
ACT-Computer-Object-Administration-MyOrg	Create, update, and delete computer objects in the person's organization	Activity (ACT)
ACT-Computer-Object-Administration-MyLocations	Create, update, and delete computer objects in the person's locations	Activity (ACT)
UI-Computer-Object-Administration	Access user interfaces and workflows for managing computer objects	Feature Set (UI)
VIS-Computer-All	View all computers	Visibility (VIS)
VIS-Computer-MyOrg	View all computers in the person's organization	Visibility (VIS)
VIS-Computer-MyLocations	View all computers in the person's locations	Visibility (VIS)

note

Users typically need both a VIS role (to see computers) and an ACT role (to perform operations) to effectively manage computers in EmpowerID.

Related Topics

• Grant Access to Manage Specific Computers – Assign Access Levels for managing individual computers
• Onboard Computers – Create new computer objects in EmpowerID