Access Management
Access management provides you the ability to grant permissions to different user accounts to resources in your environment. Resources are the apps that your organization has entitled for use. To use an application in FactoryTalk Hub, you need a resource role associated with the service. Roles control the functions in those services that are visible when the specified user account signs in to FactoryTalk Hub. The default access level without a resource-role is usually “no access” but some services do have limited access without a resource-role.
NOTE:
Roles can also be associated with an organization. By having a role at the organization level, users automatically have access to all the services in that organization.
You can also use the
Add Bulk Access
control to add roles to existing users. New users are added through invitations or request access links. From the
Hub Manager
menu, navigate down the list to Manage User Access
. The Manage User Access
screen appears. On this screen, the Owner and Administrators of the organization can add or remove access for Users, as well as view a list of users to whom access has been granted. Owners and Administrators of specific services can access this option, but they only see the users with permissions to the services they are administrators for. If a user does not appear in the list, you can add them by selecting the Invite Users
button on the top right of the Manage User Access page. You can edit an existing user account’s access by selecting the desired user account in the Manage User Access
list, and redefining their Resource Type
, Resource
, and Role
as needed.Resource Types are a selection of available resources at the organization or service level including:
- Organization - choose to grant access to every service
- Service - choose for more granular access control by each service
NOTE:
The FactoryTalk Hub manager menu is only visible after you have created or joined an organization.
To grant access to a user account
- Select theADD ACCESSbutton.
- Enter the name of the user account that you would like to add in the search bar.
- Select the desiredResource Type,Resource, andRolefrom the dropdown menus. The available options are:
- Resource Type
- Organization - choose to grant access to every service
- Service - choose for more granular access control by each service
- Resource
- Name of Organization (if Organization is selected as the Resource Type)
- All the services (applications) enabled for the organization (if Service is selected as the Resource Type)
- Role
- Admin
- Contributor
- SelectADDto add access for the user account.
- SelectSaveto save your changes.
To remove access from a user account:
- On theManage User Accessscreen, use the search bar or navigate through the Users list to find the User you would like to remove.
- In the User’s list, select theREMOVEbutton to the right of the User’s name.
To invite users to an account:
- On theManage User Accessscreen, select theInvite Usersbutton. TheSend invitesscreen appears.
- Select the resource that you are inviting the new user to have access to from theResourcedropdown list.
- Select theRolethat the new user will have. Either Admin or Contributor.
- Enter the email address or addresses of the people that you want to invite to your organization. You can add multiple emails if they will have the same resource and role privileges.
See Invitation Management for more information.
To add permissions or roles for multiple users at the same time:
- On theManage User Accesspage, select theAdd Bulk Accessbutton.
- In the Search bar, enter the user names you want to add. If users are not in the organization, they must be invited first by sending them invitations or responding to request access requests from the users.
- Assign each user aResource Type,Resource, andRolefrom the dropdown menus.
- SelectSave.
Provide Feedback