Glossary A–ZLetter R
Roles and permissions
Roles and permissions define who may do what in a screen network's management system: view, create content, approve, change devices.
A role bundles several permissions, which are then assigned to a person or group.
This allows responsibilities to be separated: head office designs templates, branches only fill in fields such as price and text, and IT looks after the devices. Permissions can often also be limited to particular screens, locations or folders. Someone who only looks after one screen in the lobby does not need access to every device in the building.
Accounts should be reviewed regularly so that people and service providers who have left keep no access. Shared accounts make it impossible to trace who changed what; one account per person is better. Permissions should be granted as sparingly as possible. Anyone allowed to hand out permissions should not be able to grant more than they hold themselves.