Roles and permissions

Upon completion of the provisioning process, a parent access group is created for you to which your Lumen services (defined by SCIDs) will be linked. Access groups are used to manage how users in your organization access your services in Media Portal. Roles enable you to define the permissions a user will have over the access group(s) assigned to them. A Media Portal user will need to be assigned both an access group and a role to define the scope of the services and features the user can access on the portal.

While the top level access group (which can be more than one, depending on your organization), along with a domain admin account, are created for you which will have all your SCIDs mapped to them, You can create child access groups with all or only selected SCIDs, which gives you greater control over which users can have access to which services. For example, you could create a child access group for your CDN services in Latin America and one for services in North America.

To view the list of access groups for your organization, After signing in to Media portal, navigate to Portal Admin > Access Groups from the tabs across the screen. This will list all your access groups, and clicking on one will display the SCIDs and users (with their roles) associated with that access group.

To create a child access group, select the access group where you want to add a child access group and click on the “Add Child Group” button. You’ll be taken to the creation page where you can fill in basic information, select the service(s) to assign to the child group and the users you want to assign to the child group (By default, all users of the parent access group have access to the child access group you're creating).

Roles are used to manage access permissions for users. For example, one user may be given a role with permission to only access invoicing, while user may be given a different role, which will enable them to view and edit configurations. A set of roles are created for you by Lumen with different sets of permissions, but you can create your own custom roles as well.

To view the list of roles for your organization, sign into Media portal and navigate to Portal Admin > Role Management and a list of roles for your domain are displayed. Clicking on a role will display the details for the role - who created the role, when it was created, when it was last edited, what access groups you can apply it to, and what permissions are assigned to the role.

To create a new role, Click on the “Create New Role” button on the Role Management page. Input the name and description for the role, and select a type for the role. Domain roles can be applied to domain access groups (The parent access groups created by Lumen) and standard roles can be applied to any other access groups. select the checkbox(es) for the permissions you want to apply when you assign this role to a user, and save to create the role.

To edit an existing role, simply select the role and click on the “Edit Role” button. Any changes made to the role will be applied to all users who have been assigned that role. In the same way, you can also delete an existing role by clicking on the “Delete Role” button instead. Please note that you cannot delete a role which is still being used. You’ll first have to remove all user associations with the role before you can delete it.