Applies to: OnCAFE administrators, system users with permission to manage roles, organizations using OnCAFE for access control and identity management

Summary

This article outlines the process for creating, customizing, and assigning System Roles in the OnCAFE platform. System Roles are used to control access to features and data based on Identity responsibilities.

Managing System Roles

Creating a Custom Role

To create a custom role:

1. Log in to OnCAFE.
    
2. In the navigate bar on the left, click System > System Roles.
   
   
    
3. Click Create Custom Role.
   
   
    
4. Enter a Custom Role Name and an optional Description.
   
   
    
5. Define permissions by selecting either View, Full or Export.
   
   
   
   View – Read-only access
   Full – Full access, including configuration
   Export – For applicable modules such as Reports
   
   The available permission categories are:
   Devices – Controllers, Doors, Elevators, Zones
   System – Schedules, Locations & Areas, Automations, Alarms, System Roles
   Reports – Report generation and export
   Operations Dashboard – Automation, Alarms, Entities
   Lockdown – Triggering Lockdown
   Role Management – Assign Roles
   Organization – Dashboard, Integration Marketplace
   Mobile – User Profile
   Identity – Cardholder Groups, Identity, Access Levels
    
6. After configuring all desired permissions, click Create.

Assigning a System Role

To assign a system role to a user:

1. Click Manage Users.
   
   
    
2. Search for a user.
   
   
      
3. Select a new role from the Current Role drop-down menu.
   
   
    

4. Click Close when finished.
   
   Your newly created role is in the System Roles list and can be assigned to any Regular Identity system user.

   NOTE: Roles can be edited or deleted as needed, provided they 
   are not actively assigned without reassignment.