Role-based access control

SECURITY  Master, Superuser, Administrator, Global Administrator

Instructions follow on how to set up role-based access control (RBAC) for a module. You do this by defining mapping rules between KaseyaOne groups and module roles (or security levels) to control user access. The purpose of defining mapping rules is to mimic or maintain the same levels of user access between KaseyaOne and the module. You set up RBAC for a module by configuring Access Groups from within the individual module.

  • If you enable Access Groups, then RBAC will be allowed for the module and you will be able define mapping rules (by mapping KaseyaOne groups to the same or similar module roles) to control user access.

  • If you disable Access Groups, then RBAC will not be allowed for the module.

NOTE  RBAC is the process of assigning permissions to users based on their role within an organization. But rather than assigning permissions to users individually, you assign permissions to a group (and then assign users to the group). Refer to Manage groups.

Enable Access Groups from individual modules

Instructions to configure Access Groups from individual modules follow.

Please refer to your module documentation and module release notes for more information.

To enable Access Groups for BMS/Vorex, do the following:

  1. From the BMS home page, navigate to Admin > My Company > Company Settings, then go to the Automatic User Creation tab.

  2. Turn on the Access Group Mapping toggle to enable the feature.

  3. Create mapping rules to control user access:

    • Click Add Access Group to create a new KaseyaOne Access Group-to-BMS/Vorex Security Role mapping.

    • Map each KaseyaOne Access Group to the same or a similar BMS/Vorex Security Role.

    • You can map more than one security role to a KaseyaOne group.

  4. Click Save.

For more information, refer to BMS Auth & Provision | KaseyaOne Settings | JIT and BMS/Vorex Help.

To enable Access Groups for ConnectBooster, do the following:

  1. Log into ConnectBooster in the usual way and click Configurations > KaseyaOne on the left navigation menu.

  2. In the Access Groups section, turn on the Enable Access Groups toggle to enable the feature.

  3. Create mapping rules to control user access:

    • Map each KaseyaOne Access Group to the same or a similar [Module] Role.

    • You can map more than one module role to a KaseyaOne group.

  4. Click Save.

For more information, refer to Associate your ConnectBooster and KaseyaOne Accounts and ConnectBooster Help.

IMPORTANT  Before enabling this feature, make sure that your KaseyaOne groups are assigned the Datto RMM module and that you have created new or renamed existing Datto RMM security levels to match the KaseyaOne group names (names are case insensitive) and level of user access.

To enable Access Groups for Datto RMM, do the following:

  1. Log in to Datto RMM in the usual way and navigate to Setup > Integrations > KaseyaOne.

  2. Review the mapping rules in the Access Groups section under Automatic Mappings Found:

    • Review the KaseyaOne group-to-Datto RMM security level mappings to make sure they are what you want. For example, each KaseyaOne group should map to a Datto RMM security level that has the same or similar level of user access.

    • Click Sync to confirm all groups match to the intended Datto RMM security level.

    • If the mappings match as expected, then proceed to the next step.


  3. Turn on the Enable Access Groups toggle to enable the feature.

For more information, refer to Datto RMM Help.

NOTE  All RapidFire modules (Compliance Manager, Cyber Hawk, Network Detective Pro, VulScan), although purchased individually, are accessed from the RapidFire Tools portal. After Unified Login is enabled for the RapidFire Tools portal, each module can be accessed through Log In with KaseyaOne.

To enable Access Groups for Rapid Fire Tools, do the following:

  1. In the RapidFire Tools portal, click T Complete > Settings on the left navigation menu.

  2. In the Access Groups section, turn on the Enable Access Groups toggle to enable the feature.

  3. Create mapping rules to control user access:

    • Click Add Access Group to create a new KaseyaOne Access Group-to-RapidFire Tools Portal Role mapping. Map KaseyaOne access group to the same or a similar role in Rapid Fire Tools.

    • Map each KaseyaOne Access Group to a specific Global Access Level in Rapid Fire Tools.

    • For Site Restricted users:
      - Select a site (from the Site(s) drop-down) to which the Group will have access.
      - Likewise, select a site role (from the Site Role drop-down).

For more information, refer to Rapid Fire Tools Help.