User Roles and Access Control

Every account in Axion Displays Radar has a role, and that role decides which pages show up in the sidebar and what you can actually do on them. There are two role families, arranged in a hierarchy:

Integrator
    └── Client

Integrator

A system integrator’s account – the installer/reseller managing a fleet of devices, typically across several of their own customers. An Integrator can:

• Manage their own devices in Device Management, and everything on the Hardware Fleet page including bulk actions.
• Set up and manage RS232 Protocols for the hardware they install.
• Create and manage Alert Rules, Metric Groups, Maintenance Windows, and Automation Schedules for their own fleet and clients.
• Create Client organizations and accounts for them under My Clients, and (unlike a Client) also create additional Integrator teammate accounts for their own organization.

There’s a subtle internal distinction between the account that “owns” an integrator organization and a teammate account created under it – day-to-day, both work the same way, but only the owning account can provision more teammate accounts.

Client

An end customer’s account – the organization actually using the displays. A Client account sees a scoped-down version of the dashboard: their own devices, their own alerts, their own logs. They:

• See Hardware Fleet, Diagnostics, and History for their own devices only – never another client’s data, and never fleet-wide settings that belong to their integrator.
• See Alerts & Automation in a read-mostly form: the rules that apply to them (fleet-wide rules as read-only, their own rules deletable), but can’t create or edit rules, Metric Groups, Maintenance Windows, or Automation Schedules themselves.
• Don’t have access to Device Management at all – reassigning devices, editing hardware identity, and everything else on that page is handled by their integrator.
• Can manage their own Local Device Access credentials (the login for their devices’ local Wi-Fi settings pages).

Page Access Can Be Narrowed Further

Beyond the role itself, an individual user’s account can have specific pages hidden even if their role would normally show them – useful for giving someone on a client’s team a narrower view than the rest of their organization. This is set per-user when they’re created or edited.

Who Creates Whom

• Integrator creates Client organizations and accounts for them, and additional teammate accounts for their own organization, via My Clients.
• Client accounts don’t provision further users themselves – ask your integrator.