Overview of roles assigned to users – Primex Support

OneVue has a user role-based permission structure that grants access to account data and permissions to system features. There are two role categories - by Business Unit and Location. Location roles should only be assigned when recommended by Primex.

The Role assigned to a user sets their permission to OneVue features (what they can and cannot do) and the Business Unit assigned to their Role sets the data they have access to. At a minimum, each user is assigned to a Role within a Business Unit. In addition, users are assigned to a Device Class for each type of Primex device installed at your facility.

Parent-child role permission structure

Depending on your account structure, you may have one or more Business Units. A user is commonly assigned to a role in the Business Unit they are responsible for.

Your OneVue account is the parent to all Business Units. If a user is assigned to the account Business Unit, the highest level in the parent-child hierarchy structure, the user is granted the same role to all child Business Units. If required, a different role can be assigned to the child Business Units.

Business Unit Roles

The following is an overview of the available roles by Business Unit. Roles are designed to mirror common job functions.

Account Admin

Assign to staff responsible for managing your OneVue account - from configuring all settings, adding users, and more. It's recommended to have a minimum of two users assigned to the Account Admin role.

This role also has permissions to:

Complete Device Preconfiguration.
Configure devices with the OneVue Wired Device Configurator (OWDC) app and the OneVue Device Configurator (ODC) app.
Access to the OneVue Audit Report, BU Activity Report, and all user type reports.
By default, the Account Admin role is granted the permissions of the Network Admin role. To only allow a network admin to have access to network profile settings, the Account Admin is Network Admin setting, located in the networks view, should be disabled.

BU Admin

Assign to staff responsible for managing components and users of their assigned Business Unit.

This role has permission to:

Edit and view settings and data associated with their assigned Business Unit.
Complete Device Preconfiguration and assign devices to their assigned Business Unit only.
Create new users and assign them to their Business Unit only.

Only when adding a new user, a BU Admin can assign a role to the user in their Business Unit. If a role change is required, this can only be made by a user assigned to the Account Admin role.
Create Report Profiles for their Business Unit, including the BU Activity Report.

BU User

Assign to staff responsible for monitoring their Business Units. In addition to the role assigned, a user must be assigned to the Device Class for the Primex devices at your facility.

When a new user is created and a role is not selected, they are automatically assigned to the account Business Unit as a BU (Business Unit) User. At a minimum, each user is required to be assigned to a Role within a Business Unit.

This role's permissions vary by the OneVue solution as detailed below.

Sense Environmental Monitoring

Device Class: Sensors

View Monitored Asset and Sensor profiles.

Acknowledge alerts, view and log alert resolutions, and add comments to the state history of a Monitored Asset.

View, download, and approve reports*

View Report Profiles*.

View Alert Rule and Alert Resolution Templates profiles.

*Cannot view the OneVue Audit Report, BU Activity Report, or user type reports.
Sync - synchronized time

Device Class: Clocks/Bridges, Transmitters

View Transmitter profiles.

Acknowledge Transmitter alerts.

View Clock profiles.

View and download reports.

View Report Profiles.
Notify Bell Scheduling

Device Class: Bell Controllers/Message Boards

View Bell Controller Relay profiles.

Acknowledge alerts.

View and download reports.

View Report Profiles.
Notify Critical Notifications

Device Class: InfoBoards, Transmitters

View Transmitter profiles.

Acknowledge alerts.

View and edit InfoBoard profiles.

View and copy (create) InfoBoard Groups and edit InfoBoard Group settings.

View and download reports.

View Report Profiles.

Scheduler

Only applies to the OneVue Notify Bell Scheduling and Critical Notification solutions.

Assign to staff responsible for managing Bell and Timer Schedules.

This role has permission to:

View and edit Bell Controller profiles.
View, add, and edit Bell/Timer Schedules.
View and edit InfoBoard profiles.
View, copy (create), and edit InfoBoard Groups.
Create and edit Report Profiles.
View and download reports.

Network Admin

Assign to staff responsible for managing the networks assigned to your Primex devices. This role has the same access as the Account Admin Role.

Commonly, this role is only assigned to restrict the Account Admin role from managing the networks assigned to Primex devices.

Complete Device Preconfiguration.
Configure devices with the OneVue Device Configurator (ODC) app.
View, add, and edit Network Profiles.
View and edit networks assigned to devices.
View and edit Gateway profiles.

Location Roles

Only assign Location Roles if Locations are assigned to your OneVue system components. The use of Locations is an optional account structure that may be used if you have Primex devices located in different geographical areas.

Before assigning Location Roles, be sure to contact Primex Technical Support to learn more about this account structure.

Facility Admin: same permissions as the Account Admin role for only the components assigned to Locations.
Facility Network Admin: same permission as the Network Admin role for only the components assigned to Locations.
Facility User: same permissions as the BU User role for only the components assigned to Locations.

User role matrix by feature

Access to OneVue account data and the permissions to system features are granted by way of the Role and Device Class assigned to each user. Roles are designed to mirror common job functions.

The following provides the features available by each role. An x in the column indicates the Role has permission to the feature.

All users can view the Dashboard, set their alert preferences, password. and mobile phone number, and manage their custom views.

OWDC and ODC app

Apps used to add new devices to OneVue and update a device's network settings.

OneVue Wired Device Configurator (OWDC): Sensors, Bluetooth Bridges, Bell Controllers, PoE Clocks

OneVue Device Configurator (ODC): OneVue Transmitters, InfoBoards

	Account Admin	BU Admin	BU User	Scheduler	Network Admin	Facility Admin	Facility Network Admin	Facility User
OWDC app	x
ODC app	x				x

Monitor

Feature	Account Admin	BU Admin	BU User	Scheduler	Network Admin	Facility Admin	Facility Network Admin	Facility User
Dashboard	x	x	x	x	x	x	x	x
Acknowledge alert	x	x	x		x	x	x	x
View reports, generate report, view report profile settings*	x	x	x	x	x	x	x	x
Acknowledged a Report Audit Review	x	x	x		x	x	x	x

To view a report, a user is required to be assigned to the Business Unit or Location for what's included in the report.

Alert Rules, Alert Resolution Templates, & Teams

Device Class: Sensors, Transmitters, Bell Controllers/Message Boards

System Feature	Account Admin	BU Admin	BU User	Scheduler	Network Admin	Facility Admin	Facility Network Admin	Facility User
View Alert Rules	x	x	x	x	x	x	x	x
Create, edit, and delete Alert Rules	x	x		x	x	x	x
View Teams	x	x	x	x	x	x	x	x
Create, edit, and delete Teams	x	x		x	x	x	x
View Alert Resolution Templates (Sensors)	x	x	x	x	x	x	x	x
Create and edit Alert Resolution Templates (Sensors)	x	x			x	x	x

Report Profiles

Device Class: All

	Account Admin	BU Admin	Scheduler	Network Admin	Facility Admin	Facility Network Admin

Create and edit Report Profiles	x	x		x	x
BU Activity Report	x	x
User Report, User Role Report, & User Alert Rule Report	x
Archive Report Profile	x	x	x	x	x	x

Account and User settings

	Account Admin	BU Admin	Network Admin	Facility Admin	Facility Network Admin
Edit account settings	x
Create and edit user profiles	x	x*	x	x	x
Create and edit Business Units	x	x	x
Create and edit Locations	x		x	x	x
Create, edit, and delete User Announcements	x		x

* Assign a new user to a Role in their Business Unit. Only an Account Admin can change the Role assigned to an existing user.

Devices - Transmitters

Device Class: Transmitter

	Account Admin	BU Admin	BU User	Scheduler	Network Admin	Facility Admin	Facility Network Admin	Facility User
View Transmitter profiles	x	x	x		x	x	x	x
Edit Transmitter profile settings	x	x				x	x

Network Profiles and Gateways

Feature	Account Admin	BU Admin	BU User	Scheduler	Network Admin	Facility Admin	Facility Network Admin
*The Account Admin Role is granted access to create and edit network and gateway profiles only if the Account Admin is Network Admin setting is enabled. This setting is managed from Devices > Networks list view.
View gateways	x	x	x	x	x	x	x
Edit gateway profile settings	x*	x			x	x	x
Download manual configuration file from gateway profile	x*				x		x
*The Account Admin Role is granted access to create and edit network and gateway profiles only if the Account Admin is Network Admin setting is enabled. This setting is managed from Devices > Networks list view.
View networks list	x	x	x	x	x		x
Create, view, edit, and delete network profiles	x*				x		x
View and disable the Account Admin is a Network Admin setting	x*
View, enable, and disable the Account Admin is a Network Admin setting					x		x

Articles in this section