This page lists, for each area of portierX, what the five standard roles may see and do. You meet the roles under Settings, User, on the Standard roles tab, in the sidebar, and in the buttons a page shows.
Also called: access rights, user rights, user roles. The Individual role is called People on the Standard roles tab and in the custom roles texts.
The second column names the roles that may do it. "Only what concerns them" means the Individual role sees only what it holds itself or what concerns it. "When named" means the right does not come from the role but from being named for the thing.
portierX checks every action on the server. The sidebar is the first check: a role sees only the entries whose pages it may open. The buttons on a page are the second: a page shows only the buttons the role may use. What a role may not do, portierX refuses.
Entry | Who sees the entry |
|---|---|
Dashboard | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: when named |
Spaces | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Locations | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
People | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Access Credentials | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: only what concerns them |
Depots | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: only what concerns them |
Access Points | Organisation Admin, Access Manager and Security Monitor |
Reviews | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: when named |
Integrations | Organisation Admin and Access Manager |
Audit Log | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: only what concerns them |
Reports | Organisation Admin, Access Manager and Security Monitor |
Settings | Organisation Admin; Access Manager, Credential Manager and Security Monitor: Org Units only |
Under Settings, the Organisation Admin sees every page: User, Area Managers, Org Units, Appearance, Email Branding, Notifications, Locking Plan Legend and Data Protection. The Access Manager, Credential Manager and Security Monitor see Org Units there and nothing else.
The Individual role sees the Dashboard once it is named Responsible or Deputy for a place, or decides requests. Under Reviews it sees the reviews in which it is asked to answer rows.
Task | Who may do it |
|---|---|
See the people list and a person's page | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Add a person | Organisation Admin, Access Manager and Credential Manager |
Import people from an Excel or CSV file | Organisation Admin, Access Manager and Credential Manager |
Edit a person, including the end date and the org unit | Organisation Admin, Access Manager and Credential Manager |
Delete a person | Organisation Admin |
Merge duplicates and undo a merge | Organisation Admin |
Link a login to a person, or unlink it | Organisation Admin |
Create and edit people groups | Organisation Admin, Access Manager and Credential Manager |
Delete a people group | Organisation Admin |
See the org units | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Add, rename, move and delete org units | Organisation Admin |
Export a person's history | Organisation Admin and Access Manager |
Task | Who may do it |
|---|---|
See locations, buildings and spaces | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Create, edit and delete locations, buildings and spaces | Organisation Admin |
Set the protection need | Organisation Admin |
Name the Responsible, Deputies, Approver and Reviewer for a place | Organisation Admin |
See space groups | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Create, edit and delete space groups | Organisation Admin |
See floor plans | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Upload floor plans, pin spaces on them and delete floor plans | Organisation Admin and Access Manager |
Set area managers | Organisation Admin |
Task | Who may do it |
|---|---|
See the depots and a depot's page | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: only what concerns them |
Add, edit, deactivate and delete a depot | Organisation Admin |
Put copies in and take them out, count stock, add photos | Organisation Admin, Access Manager and Credential Manager |
Task | Who may do it |
|---|---|
See keys and cards | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: only what concerns them |
Add a key or card, and add copies | Organisation Admin |
Edit the details of a key or card | Organisation Admin, Access Manager and Credential Manager |
Delete a key, card or copy | Organisation Admin |
Report a loss, theft or damage | Organisation Admin, Access Manager and Credential Manager |
Close out an incident | Organisation Admin and Access Manager |
Work through order requests | Organisation Admin, Access Manager and Credential Manager |
Mark a key as needing approval, and name a locking system's owner | Organisation Admin |
Task | Who may do it |
|---|---|
See access points | Organisation Admin, Access Manager and Security Monitor |
Create, edit and delete access points | Organisation Admin |
Link access points to spaces and credentials, and unlink them | Organisation Admin and Access Manager |
Task | Who may do it |
|---|---|
Give a person or a people group access | Organisation Admin, Access Manager and Credential Manager |
Take a key or card back | Organisation Admin, Access Manager and Credential Manager |
Take access away without taking everything back | Organisation Admin, Access Manager and Credential Manager |
Change the return date of a key someone holds | Organisation Admin and Access Manager |
Confirm, send, resend or cancel a pending hand-over | Organisation Admin, Access Manager and Credential Manager |
Follow the requests you raised | Organisation Admin, Access Manager and Credential Manager |
Decide a request | Whoever is named for it, in any role |
Task | Who may do it |
|---|---|
Start and close a review | Organisation Admin and Access Manager |
See every review in the organisation | Organisation Admin, Access Manager, Credential Manager and Security Monitor |
Answer and submit your own rows of a review | Whoever is named for it, in any role |
Task | Who may do it |
|---|---|
See the audit log | Organisation Admin, Access Manager, Credential Manager and Security Monitor; Individual: only what concerns them |
Export the audit log | Organisation Admin and Access Manager |
See the Credentials with Reported Incidents report | Organisation Admin, Access Manager and Security Monitor |
See and export the Handover Receipts report | Organisation Admin and Access Manager |
Task | Who may do it |
|---|---|
See integrations and connections | Organisation Admin and Access Manager |
Connect SALTO, dormakaba MATRIX, ASSA ABLOY eCLIQ or Interflex, and change the connection's settings | Organisation Admin and Access Manager |
Start a sync with a connected system | Organisation Admin and Access Manager |
Connect an HR file, or upload a locking plan as an XML file | Organisation Admin |
Set up Microsoft Entra ID for single sign-on and SCIM | Organisation Admin |
Decide on the changes of an import version, or discard the version | Organisation Admin and Access Manager |
Apply an import version | Organisation Admin |
Remove a connection | Organisation Admin |
Task | Who may do it |
|---|---|
Add users, change their role and remove users | Organisation Admin |
Create, deactivate and reactivate custom roles | Organisation Admin |
Set area managers, appearance, email branding, notifications, the locking plan legend and data protection | Organisation Admin |
Manage your own account and your own reminder emails | Every role |
Some rights come to a person because they are named for something. The role does not matter for these; the Individual role is enough.
Deciding requests. A request is decided by whoever it asks, for example the Approver of a space or the owner of a locking system. The login must be linked to a person. Whoever raised the request, or is to receive the access, does not decide it. The steps are on Approve or decline a request.
Answering reviews. Someone asked to answer rows in a review sees that review, answers their rows and submits them. They do not answer other people's rows. The steps are on Answer an access review.
Being responsible for a place. Someone named Responsible or Deputy for a place sees their places on the Dashboard.
A custom role is a selection of the rights in these tables. The Organisation Admin puts it together under Settings, User, on the Custom roles tab, and can give only rights they hold themselves; portierX refuses any other. A user can hold several custom roles next to their standard role, and then holds the rights of all their roles together. A role that may see keys but not the people list sees, like the Individual role, only what its holder holds. The steps are on Create a custom role.
A role applies per organisation. Someone working in several organisations holds a separate role in each.
The Individual role sees only the keys, cards, assignments, depot copies and audit log entries that concern it. If its login is linked to no person, it sees none.
Nobody changes their own end date, the Organisation Admin included.
There is always at least one Organisation Admin. The last one cannot be given another role.
An entry under Area Managers records who manages which places. It does not change what the user's role may do.
What your work needs and your role does not allow is a question for your Organisation Admin.
