Manage users

This tutorial describes how to manage users with Knox E-FOTA Advanced.

The Admin tab contains tools to manage Domains, Users, Domain Settings, and General Settings with Knox E-FOTA Advanced. This section of the guide focuses on Users.

Users

The Knox E-FOTA Advanced user permissions are managed with roles. Each user can be assigned no role, one role, or multiple roles to combine permissions.

A user's assigned role determines which actions and options are accessible to that user.

Roles

Role	Description
Service Admin	This role has full permissions of the entire system and is automatically created during server installation. The role can: View the status of the entire system. Manage root domains and system-wide configuration. Perform operations that affect multiple domain hierarchies. Perform actions on all data types. NOTE—This role is built-in and can't be modified or deleted. This role can only be assigned to a single user.
Admin	This role is defined on the service or root domain. It has the following permissions in the domain where it's defined: Create entities. Read entities. Update entities. Delete all entities. NOTE—This role can't perform Tester role actions.
Approver	This role has the following permissions: Approve and execute saved campaigns. Edit domains. Block service campaigns. Create, read, update, and delete entities for device groups. Delete all entities.
Content Manager	This role has the permission to manage the following: Firmware Software Devices Labels Device groups Custom settings Client configuration NOTE—To add the permission to create campaigns, combine this role with the User role.
Tester	This role has the following permissions: Manage devices. Upload new firmware and firmware versions with testing status. Manage firmware versions with the following statuses: Testing, Approved or Rejected. Read and create campaigns on firmware versions with a testing status. Delete firmware test campaigns. Approve or reject a version based on the results of the firmware testing campaign. Manage domain settings.
User	This role has the following permissions: Define a campaign. Manage device groups.
Viewer	This role has the following permissions: View domain information. Read-only permission for most entities including exported data except billing reports.
MQ External	This role has the following permissions: View domain information. Read-only permission for most entities including exported data except billing reports.

Permissions

The operations and actions each role can perform are: Create, Read, Update, and Delete.

The entities on which these actions can be performed consist of:

Audit logs
Billing report
Campaign, operation, policy
Configurations (general settings, localization, and so on)
Device groups
Domain settings
Domain
Firmware (firmware component, version, and PICs)
Labels
Software (software component, version, and PICs)
Users
Device models
Devices

Add a new user

Log in to the Knox E-FOTA Advanced portal.
Go to Admin > Users
Click New.
Under User Details, complete the mandatory fields on the form:
- Name—Enter the user's first and last name.
- User name—Enter the user's user name.
- Roles—Select available roles for the user.
Click Save.

Once the user has been created, a pop-up notifies you that the user has been created. You'll now be able to view the new user on the user list.

View user

To view the domain list on the Knox E-FOTA Advanced portal, go to Admin > Users. A filter can be applied to the user list:

Name—Filter by entering part of the user's name or the user's full name.
Role—Filter by role type. Select one of the following roles: Admin, Approver, or User.
Status—Filter by domain status. Select Active or Locked.