Can Enterprise logins be limited to seeing only specific locations?
Yes. Enterprise logins can be configured as a standard Enterprise login to view all systems within a group, have a standard login with single system exceptions, or have access to a single system.
Standard Enterprise login
A standard Enterprise login can access all systems in the group with the same permissions specified at the Enterprise level.
Example: If the login has Administrator permissions, then it will have Administrator permissions on all systems in the group by default.
Standard Enterprise login with single system exceptions
By default, all Enterprise logins will be able to access all systems in a group with the same level of access granted by their Enterprise permissions. If needed, elevated permissions can be granted to select systems individually.
Example: If a login has Enterprise access to Test Group 1 with Read-Only permissions, that login will be given Read-Only access to every system in Test Group 1 by default. A higher level of access can be granted to each system using the dropdowns if needed. In the example, the user granted Master Control to Single System 1, and Full Control to Single System 2. Single Systems 3 and 4 will continue to have the Read-Only access that was inherited by the Enterprise permissions.
Login permissions for single systems within a group will always follow the highest permission level granted. An Enterprise login cannot access a single system with lower permissions than those granted at the Enterprise level.
Example: If the Enterprise login is set to Administrator permissions, changing a single system permission to Read-Only will have no effect. The user will still have Administrator-level access to that system because the Enterprise permissions are set to Administrator. Single system access will always inherit the highest level of access.
Single system access
When using the Manage Logins page within the Enterprise Group you can create logins that have access to one or more single systems without needing to go to the systems individually. If you grant access to multiple single systems in this manner, the logins will automatically be linked together as if you had used the Linked Logins feature. These logins will not have access to the Enterprise Group level unless they are also given a role for the group.
Example: In this example, the login has been given Master level Access to Single System 1 and Read-Only access to Single System 2. This login will not grant access to the Enterprise Group itself, nor will it be able to view anything on Single Systems 3 or 4.
- For more information about how to move Enterprise locations into an Enterprise group, see Move or remove an Enterprise Location from a group.
- For more information about how to give a login permission to view specific Enterprise groups, see Associate a login with multiple Enterprise groups.
