Role-Base Access Control
Depending on how many people in your business will be managing the data in our platform, it is highly recommended as a security best practice to maintain separate accounts for different user level activities.
Each user is assigned a standard user profile. With the role-based access control (RBAC), it is possible to have different members of a team or department assigned only the functionality they need to do their job. The rights given to a user will allow them to see more or less features and data in the user interface, depending on their access.
- If you want to learn how to create a new user, check this article .
Access control dimensions
There are currently two dimensions of access controls: user roles and user features.
We currently offer four user profiles:
- Admin: Admins have all rights and can manage all present and future accounts including all locations.
- Multi-account manager: Multi-Account Managers can manage all accounts assigned to them including all locations. They can add new accounts.
- Account manager: Account Managers can manage all accounts assigned to them. They cannot create new accounts.
- Location manager: Location Managers can manage all locations assigned to them. They cannot add new locations.
There are currently 6 main features corresponding to different products and actions:
1. Location profile and Directories: Relates to viewing or managing the location profile and listings, including syncing on directories and accessing the profile suggestions. Users can have read-only rights (for all profile fields) and/or edit rights (per field). This is segmented in:
- Edit, Sync: users to manage location profiles and listings, including syncing on directories and accessing the profile suggestions. Here it is possible to select which fields a user is able to edit, when they have the main write rights.
- Deletion of duplicates: Allows users to access data about suppressed duplicates on directories (widget on dashboards).
- Location status change: Allows users to change the contract status of locations (cancel, close, deactivate or reactivate locations).
2. Customer Feedback: Allows users to manage customer feedback and access review-related data (widgets and activity feed on global and location dashboards, columns in locations list). For a read-only access enable the Customer Feedback section but disable "Respond to review". Additionally, you can allow or prevent a User to publish and approve responses
3. Response Library: Provides access to the response library. It can be view only or write access to create and edit templates.
4. Automated Responses: Allows users to set up rules for creating automated responses
5. First Party Review Approval: Allows users to approve first party reviews to be displayed on the reviews widget
6. Posting: Allows users to manage location posts on directories.
7. Ads: Allows users to access the ads campaign management product. Can be view only or edit access
8. User rights: Allows users to access the User Rights section to edit features and user information (only applies to Account Manager and above, Location Managers have no access to User Rights even when ticked).
9. Insights: Allows users to access tracking data about locations on directories. In the app, this actually corresponds to Google and Facebook insights on the dashboards.
10. Upgrade and downgrade of plan: Allows users to perform the action of changing the product plan of a given account/location.
11. Edit of user personal information: Allows users to edit their own personal information (first name, last name, email, password).
12. Price and Billing information: Allows the user to view price details of product plans and invoices.
13. Access Help section: Allows the user to access the knowledgebase.