System Roles and Permissions

bsn cloud offers a robust set of permissions features that allow you to protect your content and maintain the efficiency of your digital signage system—no matter how large it gets these security features are scalable you can choose exactly how complex you want your permissions system to be depending on the needs of your organization this page is an overview of the bsn cloud permissions system aspects of the system are described in more depth on these child pages system roles docid\ ojkjb5mzxn dx9654oc0x custom roles docid\ usv1bgagicvr7ktlnfsxq object permissions docid\ arsvzypzjxmp9uh9v95h2 system and custom roles each user must have a role when you create a user, you must specify that role but you can change the role later all bsn control and bsn content networks have the same system roles there are two in bsn control and six in bsn content these roles are maintained by us and updated during bsn cloud releases each system role has a set of operations permissions and their main purpose is to represent different job responsibilities within a company if the default set of roles does not cover your needs, you can add custom roles, as described in custom roles docid\ usv1bgagicvr7ktlnfsxq and then manage their permissions as shown in the image below you must be a bsn content user to view this page it is available in under the admin tab in the roles section screenshot 2024 10 31 at 11 15 48 am png image 1 shows a table where each row represents operations that users can execute in bsn content each operation is associated with one specific entity type (for example, content or presentation ), on the first level you can see full control operations and when expanding the rows, you can find the child operations linked to them system and custom roles are shown in the columns you can choose which system roles to display, or delete custom roles by clicking the gear button and choosing delete role the permissions granted to system roles are not editable custom roles have no permissions by default, but you can copy permissions from any existing role and adjust them for your needs in order to edit custom role permissions, you can expand the rows of this table to find the specific operation you are looking for each time you click on a checkbox in the main area, a system creates a new permission for an operation in that current row and a role in that current column when the checkbox is set, members of the current role are given permission to execute that operation when the checkbox is unchecked, the permission to execute that operation is denied both allowing and denying permissions are inherited by child from the parent operation and may be overridden for example, you can give presentation (full control) permissions to a content publishing role but ensure that they cannot delete presentations by unchecking delete presentations when reviewing the check boxes in the main area, you may notice the following statuses active checkbox with a check means that permission has been granted for this operation active checkbox with a dash means that some permissions have been granted for child operations but not this operation grey checkbox with a check means that permission have been granted for this operation and are not editable grey checkbox with a dash means that some permissions have been granted for the child operations and are not editable grey checkbox without a check means that permission is denied for this operation and this cannot be changed no check at all means that permission is denied for this operation unfortunately player activation , setup package, and provisioning cannot be controlled by user permissions this means that any user, regardless of their role, will be able to see all setup packages, create and manage provisions, and register players if this is not appropriate for your needs, consider creating separate networks for users who should not share this functionality operation and object permissions operation permissions affect all entities of a given type, but have lower priority than object permissions they are useful for defining a baseline security policy which then can be adjusted by more granular object permissions object permissions are accessible in the object properties (under security ) for example, you can select the network , content , or presentations tab, chose a player, content, or presentation, and view or change the permissions as shown in image 2 screenshot 2024 10 31 at 11 29 29 am png to get more information about object permission management, see object permissions docid\ arsvzypzjxmp9uh9v95h2