How to Configure Organization Roles

This page explains how to manually configure organization roles related to dynamic resources in MACMA (Multitenant Access Control Management Application). Only after assigning users the proper roles can they see rules from accessible facilities.

Prerequisites

Access to MACMA (Multitenant Access Control Management Application)
Administrative privileges to create and manage roles
Understanding of facility hierarchy (Area, Line, Station levels)

Procedure

Step 1: Create a New Role

Navigate to MACMA: Access Management → Roles
Click on the Add Role button
Enter a descriptive role name, ideally including:
- The facility name
- Role type keywords ("Admin" or "User")

Step 2: Filter Resources by Application

In the role creation dialog, filter the resources by selecting Nexeed Condition Monitoring as application:

Step 3: Understanding Resource Registration

For each facility of facility type "Area", resources are registered automatically by the Condition Monitoring application in MACMA.

Step 4: Configure Administrator Role

If you want to define an Administrator Role for a facility:

Ensure all privileges are selected for the resource:
- read
- add
- modify
- delete

Step 5: Configure User Role

If you want to define a User Role with read-only access to basic Condition Monitoring functionality for a facility:

Select only the read privilege for the resource

Step 6: Configure Super-Administrator Role

If you want to define a Super-Administrator Role with access to devices from all facilities:

Select privileges read, add, modify, delete for all available resources

Step 7: Assign Roles to Users

After roles are created, assign them to users using the standard MACMA user assignment process.

Important Considerations

Privilege Dependencies

Having the add privilege does not automatically include the read privilege
Each privilege must be explicitly assigned

Inheritance Limitations

In default Privileges are defined on IAS Area Level
Permissions granted at higher level automatically apply to all lower levels
It is possible to define another root level, please contact support for assistance

Access Control Updates

Users will only get access after updated information is fetched by the Condition Monitoring application from MACMA:

Access Control List information is fetched from MACMA every 3 minutes
Organization role information is cached for 2-3 minutes
Allow up to 5 minutes for role changes to take effect