Configure Logged-In User Permissions

Adding a New Role for Logged-In Users

1. Access the Embedded Web Server and log in to the Embedded Web Server as a System Administrator.

2. In the Embedded Web Server, click Properties > Login/Permissions/Accounting.

3. Click User Permissions.

4. For User Permission Roles, click Edit.

5. Click the Logged-In Users tab.

6. To create a role, click Make Your Own Permission Roles or Add New Role.

7. For New Permission Profile, type a name and description for the role.

8. To configure access for users to apps, click View Quick Setup Options, then for Allow users, select an option.
   
   Note: If you do not select an option, print permissions are set to Allowed. The default permissions for a new role are the same as the permissions for the Non-Logged-In user role.
   
   

9. Click Create.

10. To assign users to the role, or to configure permissions for the role, click the Print link or the Apps and Tools link.

11. To save, click Apply.

12. Logout of System Administrator mode.

Assigning Users to a Role for Local Authorization

After you configure local authorization, add user information to the user database, and create a user-defined permission role, you can assign users to the role.

1. Access the Embedded Web Server and log in to the Embedded Web Server as a System Administrator.

2. In the Embedded Web Server, click Properties > Login/Permissions/Accounting.

3. Click User Permissions.

4. For User Permission Roles, click Edit.

5. Click the Logged-In Users tab.

6. To add users to a user-defined permission role, for the desired role, click Edit User Mappings.

7. For Methods, select an option.

   • To assign specific users to the role, select Select Individual Users, then from the list of user names, select a user.

   • To assign all users to the role, select All Logged-in Users. To exclude individual users from this list, select Exceptions, then from the list of user names, select users.

8. To create a user entry and add it to the role, click Add New User.

9. Click Apply.

10. Logout of System Administrator mode.

Assigning User Groups to a Role for Network Authorization

After you configure network authorization, you can assign LDAP or SMB groups of users to roles.

1. Access the Embedded Web Server and log in to the Embedded Web Server as a System Administrator.

2. In the Embedded Web Server, click Properties > Login/Permissions/Accounting.

3. Click User Permissions.

4. For User Permission Roles, click Edit.

5. Click the Logged-In Users tab.

6. For a role, click Edit User Mappings.

7. Under Methods, select an option:

   • Assign Groups: This option allows you to select the user groups that you want to assign to the role.

   • All Logged-in Users: This option assigns all user groups to the role.

8. To select specific user groups to remove from the role, select All Logged-in Users then select Exceptions. All other user groups are assigned to the role.

9. If you chose Select Individual Users, or Exceptions, select user groups from the list.

   1. If you know the name of the group you want to add, for Assign Groups, type the group name, then click Search for Groups.
      
      Note: If LDAP or SMB server settings are not configured, you cannot search for and add groups.
      
      

   2. To add a group to the role, select the group from the list, then click Add. Groups assigned to the role appear in the Users in Assigned Groups list.

   3. To remove a group, select the group in the Users in Assigned Groups list, then click Remove. To remove all groups from the list, click Remove All.

10. Click Apply.

11. Logout of System Administrator mode.

Edit a Logged-In User Role

1. Access the Embedded Web Server and log in to the Embedded Web Server as a System Administrator.

2. In the Embedded Web Server, click Properties > Login/Permissions/Accounting.

3. Click User Permissions.

4. For User Permission Roles, click Edit.

5. Click the Logged-In Users tab.

6. For the role that you want to edit, click Edit User Mappings.
   
   Note: You cannot edit permissions for the System Administrator or Accounting Administrator roles. Users assigned to the System Administrator role can access all features of the device. Users assigned to the Accounting Administrator role can access accounting features only.
   
   

7. To assign users to the role, or to configure permissions for the role, click either the Print tab or the Apps and Tools tab.  For details, refer to Configure Non-Logged-In User Permissions.
   
   Note: For each user permission type, you cannot restrict access for logged-in users and allow access for non-logged-in users. To restrict access for non-logged-in users, for a permission setting, click the Auto Correct link.
   
   

8. To save, click Apply.

9. Logout of System Administrator mode.