A Privilege Group determines the venues a role can access and can therefore enable an administrator to manage devices. By default, system-defined privilege groups are available. You can also create custom privilege groups.

1. On the RUCKUS One web interface, navigate to Administration > Account Management > Users & Privileges.
2. Click the Privilege Groups sub-tab.
   The following information is displayed:

   • Name: Displays the name of the privilege group.
     Note: Once a privilege group is created and a member is assigned, the privilege group Name cannot be modified; however, other parameters can be edited.
   • Description: Displays a description of the privilege group.
   • Role: Displays the system-defined roles and custom roles associated with the privilege group.
   • Scope: Displays the venues that can be accessed by the members of the group.
   • Group Type: Displays whether the group is system-defined or custom.
   • Members: Displays the number of administrators or user associated with the group.

   

   You can filter the list of privilege groups by Role and Group Type.
3. Click Add Privilege Group.
   The New Privilege Group page is displayed.
4. In the Name field, type the name of the group.
   Note: You cannot create a custom privilege group with the same name as a system-defined privilege group. The name must be unique and cannot contain spaces; you can use underscores (_).
5. In the Description field, type a short description for the group.
6. From Role, select the system-defined roles or custom roles from the drop-down list.
   Note: Prime Admin is supported only for MSP customers.
7. In the Scope section, under Own Account, you can either choose All Venues or Specific Venues to select one or more venues to manage. The members of the Privilege Group with this scope can access all the venues.
   If you choose Specific Venues, the Select Venues hyperlink is enabled. Click Select Venues to choose the venues for that tenant and click Save Selection. You can choose one or more venues. The members of the Privilege Group with this scope can access only the selected venues. You can click Change to change the scope of venues that can be managed by the member.

   

   For MSP customers, the MSP Customers section is displayed and you can choose either All Customers or Specific Customer(s) to select one or more customers to manage.

   When you select Prime Admin role, only the MSP Customers section is displayed. To set the scope, select the MSP Customers check box. By default, All Customers option is selected. To further refine the Privilege Group scope to one or more customers, select Specific Customer(s) option.

   

8. Click Add.
   The newly created custom privilege group is added to the list of groups in the Privilege Groups tab. A notification is displayed on the Activities page accessible via the icon at the top right corner of the RUCKUS One web interface.

   Note: Clone operation is supported only for Administrator and Read-only system-defined privilege groups. You can clone, edit, and delete custom privilege groups by clicking Clone, Edit, or Delete, respectively.