Adding and Managing a Custom Privilege Group

A Privilege Group determines the venues a role can access and can therefore enable an administrator to manage devices. By default, system-defined privilege groups are available. You can also create custom privilege groups.

REC and MSP customers can create privilege groups.
  1. On the RUCKUS One web interface, navigate to Administration > Account Management > Users & Privileges.
  2. Click the Privilege Groups sub-tab.
    The following information is displayed:
    • Name: Displays the name of the privilege group.
      Note: Once a privilege group is created and a member is assigned, the privilege group Name cannot be modified; however, other parameters can be edited.
    • Description: Displays a description of the privilege group.
    • Role: Displays the system-defined roles and custom roles associated with the privilege group.
    • Scope: Displays the venues that can be accessed by the members of the group.
    • Group Type: Displays whether the group is system-defined or custom.
    • Members: Displays the number of administrators or user associated with the group.
    Creating a Custom Privilege Group
    You can filter the list of privilege groups by Role and Group Type.
  3. Click Add Privilege Group.
    The New Privilege Group page is displayed.
  4. In the Name field, type the name of the group.
    Note: You cannot create a custom privilege group with the same name as a system-defined privilege group. The name must be unique and cannot contain spaces; you can use underscores (_).
  5. In the Description field, type a short description for the group.
  6. From Role, select the system-defined roles or custom roles from the drop-down list.
  7. In the Scope section, under Own Account, you can either choose All Venues or Specific Venues to select one or more venues to manage. The members of the Privilege Group with this scope can access all the venues.
    If you choose Specific Venues, the Select Venues hyperlink is enabled. Click Select Venues to choose the venues for that tenant and click Save Selection. You can choose one or more venues. The members of the Privilege Group with this scope can access only the selected venues. You can click Change to change the scope of venues that can be managed by the member.

    For MSP customers, the MSP Customers section is displayed and you can choose either All Customers or Specific Customer(s) to select one or more customers to manage.

    Role Scope
  8. Click Add.
    The newly created custom privilege group is added to the list of groups in the Privilege Groups tab. A notification is displayed on the Activities page accessible via the icon at the top right corner of the RUCKUS One web interface.
    Note: Clone operation is supported only for Administrator and Read-only system-defined privilege groups. You can clone, edit, and delete custom privilege groups by clicking Clone, Edit, or Delete, respectively.
After a privilege group is created, the Members column in the Privilege Groups tab displays 0 until you add users to the group, at which time the display automatically updates. Refer to Adding and Managing an Administrator for instructions to add and manage privilege group members.