Creating a New Foreign Operator Role

Foreign Operator roles are roles that can be shared with external organizations (accepting organizations) to perform certain specific tasks. This role cannot be assigned to operators that belong to the same organization as the role itself. Users can be assigned permissions to manage users, sites and/or system configurations. You can also assign command permissions for individual objects such as door, area, input, and output.

1. Click Users on the left navigation pane.
2. Click the Roles tab.
3. Expand the Foreign Operator Role option.

4. Click Add Foreign Operator Role.

5. In the Add Foreign Operator Role page, enter a Role Name for the operator role.

6. In the Assign Schedule field, click + at the end of the field to display the Add Schedule dialog box.

   1. Find the schedule you wish to assign to the operator role.
   2. Click Select on the schedule tile.

7. If the default Organization displayed is not the correct one, click x at the end of the field then find and select the correct organization.

   The organization associated for a role cannot be changed once the role is created. You can have the same role associated with different organizations, as needed.

8. In the Remote Grant section, specify the name of the external organization that can access this role.

   Enter any additional information about the external organization.

9. In the Capabilities section, assign access to various system functions.

   You can assign access for all the capabilities and permissions using the All read-only, All full access or Set minimum permissions buttons.

   Or turn on the for each individual section to allow permission.

   If all toggles are turned off , the permissions are not allowed for the role.

   The listed capabilities are self explanatory.

10. In the Users section, turn on the Show Credential PIN toggle to enable operators with this role to view PIN on the User page. If turned on, operators with this role can view the PIN of all users that belong to the operator’s organization. By default, this option is turned OFF.

11. In the Command Permissions section, you can configure permissions for executing various commands or actions for each of the objects listed. Select the check box at the object level to grant permission to execute all the actions for the object. Else, you can allow the necessary actions for each object.

    For example, an operator without Activate permission for output will be restricted from activating any output across the Platform. This includes initiating an output activation from the Dashboard, Maps, and Widgets.

    Alternatively, you can use the All on or All off buttons to grant all permissions or revoke all permissions for all the listed objects.

12. Turn on Can Use Mobile App toggle to enable any user with this operator role to log in to the Sonitrol CORE Manager App.

13. Click Create.