Set ControlUp Account Permissions

ControlUp uses role-based access control to assign permissions. This means that you assign permissions to roles, and then assign roles to users. A user can have multiple roles, and they can perform a certain action if at least one of their roles includes the relevant permission.

Limit permission scope to certain devices

You can set the scope for a permission so that it applies only to certain devices. For example, you can give a help desk employee permission to remote control devices in the HR department, but not allow them to remote control devices used by senior executives.

You can set the scope of a permission by targeting devices with groups and tags. The permission applies to a device only if the device is in one of the specified groups or has at least one of the specified tags. Learn more about device groups and tags.

Note that you can set the permission scope only for permissions in the Device Permissions and Unified Communications and Collaboration categories.

Assign user roles to SAML IdP groups

If you use SAML SSO, you can assign a role to a user based on the their user groups in your IdP. Learn more.

Create a custom user role

To create a custom role and set permissions for the role:

1. Go to Global Settings > Roles > New Role.
2. Enter a Name and Description.
3. Select which permissions you want to add to the role.
4. If you want to limit permission scopes to only certain devices, add group and tag targets. Read Limit permission scope to certain devices above for details.
5. Click Save.

Manually assign a role to a user

To assign roles to a specific user:

1. Go to Global Settings > User Settings.
2. Click a user's name.
3. In the Roles dropdown, add or remove roles.
4. Click Save.

To assign a role to multiple users:

1. Go to Global Settings > Roles.
2. Click on a Role.
3. Go to the Users tab and click Edit Users.
4. Use the checkboxes to assign or unassign the role to each user.
5. Click Save.