Overview
The Captive Access Network (CAN) Administration Portal is used by many people with different roles. Some set up portals, plans and vouchers, some manage guest accounts every day, and some only need to monitor usage. Access privileges let you give each of these users only the access their role needs.
An access privilege is assigned to the admin user's IAM account in EpicLink. When the user logs in to the CAN Administration Portal, the privilege decides:
-
Which tabs the user can see, such as Sessions, Users, Plans, Vouchers, Reports, Events and Portal Manager.
-
Which actions the user can perform in each tab, for example adding users, resetting passwords, creating plans or editing portals.
-
Whether the user can only view information, or can also make changes.
Purpose of Access Privileges
-
Role-based access – Match each user's access to their job. A front-desk operator can manage guest accounts without being able to change plans or portal settings.
-
Protect critical configuration – Portal settings, landing pages, plans and voucher packs affect every end user on the network. Only CAN Admin users can change them, which prevents accidental or unauthorised changes.
-
Prevent mistakes – High-impact actions such as bulk uploads, bulk deletes and expiring plans are limited to the users who are trusted to perform them.
-
Separate CAN from other products – CAN access privileges apply only to the CAN Administration Portal. A user with a CAN privilege does not get access to services in other Sat-Elite products.
How Access Privileges Help
For CAN admins
-
Delegate daily tasks, such as creating user accounts, resetting passwords and adding top-ups, to support staff without giving them full control of the portal.
-
Keep full control of portals, landing pages, plans, vouchers and payment settings.
-
Give managers or auditors read-only access to sessions, users and usage reports.
For portal users
-
Users see only the tabs and actions they are allowed to use, so the portal is simpler and easier to work with.
-
Users can work with confidence, knowing they cannot accidentally change settings that affect everyone on the network.
-
End users connecting to the captive network get a stable, consistent experience because their portal, plans and vouchers are managed only by authorised admins.
Choose the lowest access privilege that lets the user do their job. You can change a user's access privilege at any time if their role changes.
Access Privilege Types
There are three CAN access privilege types:
|
Access Privilege |
Description |
Suitable for |
|---|---|---|
|
CAN Admin Access |
Full access to the CAN Administration Portal. The user can manage users, plans, vouchers and portals, including the Portal Manager and landing page settings. |
Administrators who set up and maintain the captive portal. |
|
CAN Limited Access |
Day-to-day user management. The user can add and manage user accounts, but can only view plans and vouchers. The Portal Manager tab is hidden. |
Support or front-desk staff who manage user accounts. |
|
CAN Read Access |
View-only access. The user can view users, sessions, plans and vouchers, and generate usage reports, but cannot make any changes. The Portal Manager tab is hidden. |
Users who only need to monitor usage and view reports. |
The Payment GW tab is not controlled by the CAN access privilege. It is available only to users who also have the Payment Gateway Access privilege, whichever CAN privilege they have.
Feature Access by Privilege
The tables below list each feature in the CAN Administration Portal and the access privileges that can use it.
Available
Not available
Tabs
|
Area |
Feature |
CAN Admin |
CAN Limited |
CAN Read |
|---|---|---|---|---|
|
Tabs |
Sessions, Users, Plans, Vouchers, Reports, Events |
|
|
|
|
|
Portal Manager (portal configuration and landing page editor) |
|
|
|
|
|
Payment GW |
Requires Payment Gateway Access |
Requires Payment Gateway Access |
Requires Payment Gateway Access |
Users
|
Area |
Feature |
CAN Admin |
CAN Limited |
CAN Read |
|---|---|---|---|---|
|
Users |
View user list, session details and plans; generate Usage Report |
|
|
|
|
|
Add User Account |
|
|
|
|
|
Bulk select and Bulk Delete |
|
|
|
|
|
Bulk actions: Reset Password, Update/Restart Plan, Reset Quota, Reactivate, Top-up |
|
|
|
|
|
Bulk Upload User Accounts (CSV) |
|
|
|
|
|
Bulk upload with action "delete" |
|
|
|
|
|
Per-user Actions dialog: Edit, Reset Password, Delete, Reactivate, Report, Purchase History |
|
|
|
|
|
Enable/Disable account switch |
|
|
|
|
|
Expire Plan |
|
|
|
|
|
Add Top-up |
|
|
|
* Add Top-up is not available to CAN Limited Access users in the 54 Elcone organizations.
Plans
|
Area |
Feature |
CAN Admin |
CAN Limited |
CAN Read |
|---|---|---|---|---|
|
Plans |
View plans |
|
|
|
|
|
Add New Plan, Edit Plan, Delete Plan |
|
|
|
Vouchers
|
Area |
Feature |
CAN Admin |
CAN Limited |
CAN Read |
|---|---|---|---|---|
|
Vouchers |
View voucher packs and vouchers |
|
|
|
|
|
Add Voucher Pack |
|
|
|
|
|
Edit, delete, distribute and bulk select vouchers |
|
|
|
|
|
Bulk upload/download vouchers |
|
|
|
Portal Manager
|
Area |
Feature |
CAN Admin |
CAN Limited |
CAN Read |
|---|---|---|---|---|
|
Portal Manager |
Add Portal; Edit, Enable/Disable, Copy, Delete Portal |
|
|
|
|
|
Landing page settings: self sign-up, OAuth, multi-plan, paywall |
|
|
|
Site Access: All-Sites and Restricted-Site Users
Site access also affects what a user can see and do
In addition to the access privilege, each admin user has a site access level. A user can be an all-sites user, with access to every site in the organization, or a restricted-site user, with access only to the sites assigned to them. The access privilege decides which features the user can use, and the site access level decides which sites those features apply to.
All-sites users
-
See data for every site in the organization, including users who are not assigned to any site.
-
When they use Select all in the user list, the selection includes users on the selected sites and users with no site.
-
Can manage organization-wide portals in Portal Manager > Global Configurations (Edit, Enable/Disable, Copy and Delete), and site portals in Site Configurations.
-
When they add or edit a user and select every site, the user is saved as an all-sites user. The user automatically gets access to any new sites added later.
Restricted-site users
-
See data only for the sites assigned to them.
-
When they use Select all in the user list, the selection includes only users on the selected sites. Users with no site are not included.
-
Can view global portals in Portal Manager > Global Configurations, but cannot change them. The Actions column is hidden.
-
Can manage site portals in Site Configurations, but only for their own sites.
-
When they add or edit a user, the user is always saved with the specific sites selected. The user stays limited to those sites, and does not get access to new sites automatically.
The Portal Manager actions above apply only to users whose access privilege includes Portal Manager (CAN Admin Access).