Skip to main content

🛠️ Creating and Configuring Roles

Custom roles allow you to tailor GCXONE access to your specific operational needs. Follow this tutorial to create your first custom role.

🏗️ Step-by-Step Configuration​

  1. 1

    1. Access Role Settings​

  2. 2
    1. Click Settings in the main sidebar.
    2. Navigate to the Roles tab.
    3. Click Configure New Role.
  3. 3

    2. Basic Information​

  4. 4

    Enter a descriptive name and a brief summary of what the role is for.

  5. 5
    • Example Name: "Night Shift Operator"
    • Example Description: "Monitoring access for after-hours staff; no config privileges."
  6. 6

    3. Assign Privileges​

  7. 7

    Select the check-boxes for each permission category:

  8. 8
    • Dashboard: View analytics and system health.
    • Monitoring: Live video and alarm processing.
    • Configuration: Device and site setup.
    • Settings: User and role management.
  9. 9

    4. Set Access Level​

  10. 10

    Choose how much of the hierarchy this role can see:

  11. 11
    • Service Provider: Global access (Tenant level).
    • Customer: Client-specific access.
    • Site: Location-specific access.
  12. 12

    5. Configure Session Timeout​

  13. 13

    Decide how long a user can be inactive before being logged out (default is 30 minutes).

  14. 14
    • Admin: 120 minutes recommended.
    • Operator: 60 minutes recommended.

💡 Best Practices​

  • Document Custom Roles: Keep a list of why a custom role was created to avoid "Role Bloat."
  • Least Privilege: Start with zero permissions and add only what the user needs to do their job.
  • Test Before Deployment: Create a "dummy" user with the new role to verify the sidebar only shows the intended apps.

Related Articles

Roles and Access Levels

Understanding the RBAC hierarchy.

Customer Groups

Filtering client visibility.

Inviting Users

The next step after creating a role.

Next: Configuring Customer Groups