Roles
Roles give users control over what they can and can't do in the software. Roles are assigned to users.
Role categories
There seven roles divided between two role categories:
Administrative category
Functional category
The following table shows each role and the category to which the role belongs.
Role | Administrative Category | Functional Category |
|---|---|---|
Super Admin (Intellicheck only) | X | |
Account Admin | X | |
Customer Admin | X | |
Desktop User | X | |
Dashboard Viewer | X | |
PII Viewer | X | |
Portal Viewer | X | |
Theme Editor | X |
Administrative roles
There are three roles in the administrative category:
Customer Admin. Privileges to manage users and view dashboards within their assigned customer.
Account Admin. All privileges for Customer Admin plus privileges to view dashboards, view customers, and manage users within their assigned account.
Super Admin. (Intellicheck only) All privileges for Account Admin plus privileges to manage customers and accounts, along with access to all functions in Hub.
Each role is granted certain privileges. Privileges are applied on the Hub software interface through the addition or removal of menus and commands.
For example, a user assigned to the Customer Admin role sees the Users menu on the Hub interface.
Actions
Actions include commands such as edit, activate and deactivate.
Administrative role priorities
You can assign more than one administrative role to a user. Privileges for higher-priority roles replace those for lower-priority ones. For example, the Account Admin role is a higher-priority role than the Customer Admin role. Therefore, Account Admin privileges are given to a user who is assigned both the Account Admin role and the Customer Admin role.
A user with a lower-priorty role cannot edit another user with a higher-priority role. For example, a user assigned to the Customer Admin role cannot edit a user assigned to the Account Admin role.
Administrative roles and customer assignments
A user must be assigned to a customer. The customer assignment is limited based on the administrative role of whoever is adding or editing the user.
An Account Admin can assign a customer to a user. For example, suppose an Account Admin manages the Universal Widgets account, which has two customers, Witty Widgets and Wacky Widgets. That Account Admin can create a new user and assign either Witty Widgets or Wacky Widgets to the user.
A Customer Admin cannot assign a customer to a user. The assignment is automatic. For example, suppose a Customer Admin is assigned to the Witty Widgets customer. That Customer Admin can create a new user only for Witty Widgets.
Functional roles
There are several functional roles:
Dashboard Viewer. Can view customer dashboards and reports.
Portal Viewer. Can access Portal to perform ID validation.
Desktop User. Can access the Products page to download and install the Desktop product for ID validation. There is a separate log in URL for Desktop. The Desktop User role allows the Hub user to also log in to Desktop with the same Hub credentials.
PII Viewer. Can view personally identifiable information (PII).
Theme Editor. Can view and edit themes in Theme Builder.
Similar to administrative roles, each functional role is granted certain privileges. Privileges are applied on the Hub software interface through the addition or removal of menus and commands, as shown in the following table.
Functional role privileges
Menu | Privilege | Dashboard Viewer Role | PII Viewer Role | Portal Viewer Role | Desktop User Role | Theme Editor Role |
|---|---|---|---|---|---|---|
Customer Dashboard > Overview | View customer dashboards | Yes | No | No | No | No |
Customer Dashboard > Customer Journey | View customer journey data | Yes | No | No | No | No |
Transactions | View PII for transactions | No | Yes | No | No | No |
Portal | Use Portal to perform ID validation | No | No | Yes | No | No |
No menu | Log in to Desktop (separate URL) | No | No | No | Yes | No |
Products | Download Desktop | No | No | No | Yes | No |
Themes | View and edit | No | No | No | No | Yes |
For example, a user assigned to the Portal Viewer role sees the Portal menu on the Hub interface. However, that user does not see the Customer Dashboard > Overview menu or the Products menu.
Assign roles
When you add a user, you can assign roles.
A user can be assigned a single role or multiple roles.
Example role assignments
User | Super Admin (Intellicheck only) | Account Admin | Customer Admin | Desktop User | PII Viewer | Dashboard Viewer | Portal Viewer | Theme Editor |
|---|---|---|---|---|---|---|---|---|
User 1 (Intellicheck only) | X | X | ||||||
User 2 | X | X | X | |||||
User 3 | X | X | X | X | ||||
User 4 | X | X | X | |||||
User 5 | X | X | X |
User 1 is a Super Admin (Intellicheck only) that can create accounts, customers, and users, and log in to Desktop. Because of the Super Admin role, this user can also view dashboards and access Portal to start a validation process.
User 2 is an Account Admin with functional roles for Dashboard and Portal. User 2 can view customers (but not create or edit customers); view, create, and edit users; view dashboards; and use Portal. But User 2 cannot log in to Desktop.
User 3 is a Customer Admin with functional roles for Desktop, PII, and Dashboard. User 3 can view, create, and edit users; log in to Desktop; and view PII on the Transactions page. But User 3 cannot use Portal.
User 4 is a Customer Admin with functional roles for Dashboard and Portal. User 4 can view, create, and edit users; view dashboards (but not PII); and use Portal.
User 5 has no administrative roles, but has three functional roles for Desktop, Portal, and Theme Editor. User 5 can log in to Desktop, use Portal, and select the Themes menu to edit themes.