How to utilize user roles to manage data access permissions in Boxafe?

Applicable Products

Boxafe

Introduction

Boxafe provides a user role management feature that allows you to assign user roles to different Boxafe users, where each role has different permission settings for data access and various functions. This way, you can control what actions each user is allowed to perform and what data or information the user can access in Boxafe.

When adding a new user, you must assign a user role. Depending on the user role selected, you can assign one, multiple, or all domains to the user for access. You can also change an existing user's role and domain assignments any time.

Boxafe comes with several default user roles whose permission settings can be edited. Additionally, you can create new user roles with custom permission settings.

The following sections cover the default user roles, how to configure a user role for a new or existing user, and how to edit an existing user role or create a custom user role.

Default User Roles

Boxafe comes with several default user roles which you can manage in Settings > Roles.

The following table provides a general description of the default permissions available to each role. 

To view the full details of a user role's permission settings, click the corresponding Edit icon under Action.

Configuring a User Role for a New or Existing Boxafe User

1. Open Boxafe as a Super Admin user.
2. Go to Settings > Users.
   
3. Perform one of the following actions:
   1. To edit an existing Boxafe user, click the Edit icon under Action.
      The Edit User window opens.
   2. To add a new Boxafe user, click Add User.
      The Add User window opens.
      
4. Select a NAS user to add as a Boxafe user.
   
   Note

   This step is only available when adding a user.
5. Select a role.
   For details on the default user roles, see "Default User Roles" earlier in this article.
6. Select one or more domains to allow the user to access.
   Note

   • For users with the Self Service User role, you can only select one domain.
   • Super Admin and Global Admin users are automatically granted access to all domains.
   • User roles with the permission to edit domains can manage all domain users of their assigned domains.
7. Select an email ID associated with the user's account.
   Note

   • This step is only available when configuring a user with the Self Service User role, and you can only select one email ID.
   • For all other user roles, "All" is automatically selected.
8. Click Apply.
   Boxafe saves the new settings or adds the new user.

Editing or Creating a User Role

1. Open Boxafe as a Super Admin user.
2. Go to Settings > Roles.
   
3. Perform one of the following actions:
   1. To edit an existing user role, click the Edit icon under Action.
      The Edit Role window opens.
   2. To create a new user role, click Create Role.
      The Create Role window opens.
      
4. Specify a name or change the name of the user role.
   
   Note

   Default user role names cannot be changed.
5. Configure the permission settings for the user role.
   
   Tip

   • Click Expand all to expand and view all permission settings in detail.
   • Click the arrow next to a permission group to expand all related permission settings under it.
   • To grant all permissions in a permission group to the user role, select the checkbox next to the permission group.
   Note

   Some permission settings are only available to certain default user roles and are unavailable to custom user roles.

6. Click Apply.
   Boxafe applies the setting changes or creates the new user role.