Access Management

Access management provides the ability to grant permissions to different user accounts to resources in your environment. Resources are the organization, sub-organizations, and apps that you can use. To use an application in FactoryTalk Hub, you need to be assigned a role within an organization, sub-organization, or application. If you have a role assigned at organization or sub-organization level, you are granted access to all applications in that organization or sub-organization. If you have a role assigned only at a specific application, it grants permissions to that application. To use an application in FactoryTalk Hub, a resource role associated with the service is required. Roles control the functions in those services that are visible when the specified user account signs in to FactoryTalk Hub. The default access level without a resource-role is usually “no access” but some services do have limited access without a resource-role.
TIP: By having a role at the organization level, users automatically have access to all the services in that organization and all its sub-organizations and their services. When accessing a sub-organization, you can only view users with direct roles in this sub-organization, not inherited from the parent organization.
You can also use the
Add Bulk Access
 control to add roles to existing users. New users are added through invitations or request access links. When searching for a user, all users from a complete organizational hierarchy (parent organization and all its sub-organizations) can be selected to give additional permissions.
From the FactoryTalk menu, select
Manage User Access
. The
Manage User Access
 screen appears. On this screen, the Owner and Administrators of the organization can add or remove access for Users, as well as view a list of users to whom access has been granted. Owners and Administrators of specific services can access this option, but they only see the users with permissions to the services they are administrators for. If a user does not appear in the list, you can add them by selecting the
Invite Users
 button on the top right of the Manage User Access page. You can edit an existing user account’s access by selecting the desired user account in the
Manage User Access
 list, and redefining their
Resource Type
,
Resource
, and
Role
 as needed.
Resource types are a selection of available resources at the organization or service level including:
  • Organization - choose to grant access to all services in a organization
  • Sub-organization - choose to grant access to all services in a sub-organization
  • Service - choose for more granular access control by each service
TIP: The FactoryTalk Hub manager menu is only visible after you have created or joined an organization.
To grant access to a single or multiple user accounts:
  1. Select
    Add Bulk Access
    .
  2. In the Search bar, enter the user names you want to add. If users are not in the organization, they must be invited first by sending them invitations or responding to request access requests from the users.
  3. Select the desired
    Resource Type
    ,
    Resource
    , and
    Role
     from the drop-down menus. The available options are:
    • Resource Type
      • Organization - select to grant access to every service
      • Service - choose for more granular access control by each service
    • Resource
      • Name of Organization (if Organization is selected as the Resource Type)
      • All the services (applications) enabled for the organization (if Service is selected as the Resource Type)
    • Role
      • Admin
      • Contributor
  4. Select
    Save
    .
To remove access from a user account:
  1. On the
    Manage User Access
     screen, use the search bar or navigate through the Users list to find the User to remove.
  2. In the User’s list, select the
    REMOVE
     button to the right of the User’s name.
To invite users to an organization:
  1. On the
    Manage User Access
     screen, select the
    Invite Users
     button. The
    Send invites
     screen appears.
  2. Select the resource that you are inviting the new user to have access to from the
    Resource
     drop-down list.
  3. Select the
    Role
     that the new user will have. Either Admin or Contributor.
  4. Enter the email address or addresses of the people that you want to invite to your organization. You can add multiple emails if they will have the same resource and role privileges.
For more information, see Send Invites.
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.
Normal