Admin Management Tools

Accessed from the System Configuration menu, this is where you create/edit roles and permission as well as Admin User Accounts.

Manage Roles and Permissions

Roles and Permissions in OPS-COM provide granular control over what administrative users can access and do within the system. This feature allows administrators to define specific responsibilities, enhance security, and ensure that each user has appropriate access levels, streamlining operations and maintaining data integrity.

Using this Feature

  1. Click System Configuration, then Admin Management, and click Manage Roles.
Creating and Managing Roles

Roles are central to the permissions system, acting as templates for sets of permissions.

  1. The Manage Administrator Roles page will display. The System Administrator (Primary) role is pre-defined and allows you to create new roles and assign them to other admin users.
  2. To create a new role, click the Add New Role button at the bottom of the page.
  3. Enter a descriptive Role Name and a Description for that role.
    • The description will appear as a rollover tooltip when you mouse over the Edit Role button for that role.
  4. Click Save Role to save your new role.

    FVUimage.png
Editing Existing Roles

You can modify the name and description of any role (except the System Administrator role).

  1. On the Manage Administrator Roles screen, click the Edit Role button next to the role you wish to update.
  2. Make your desired changes to the Role Name and/or Description.
  3. Click Save Role to save your edits.
Assigning Permissions to a Role

Once a role is created, you'll define what actions users assigned to that role can perform by setting its permissions. Refer to this article for more detailed Permissions information.

  1. On the Manage Administrator Roles screen, click the Permissions button next to the role you want to configure. The Editing Permissions screen will display.
  2. The top bar displays various icons, mirroring the OPS-COM menu structure. The number next to each icon indicates how many permissions within that category have been selected for the current role.
  3. Click an icon (e.g., a "Permit" icon, a "Violations" icon) to display the specific permissions available within that category.
  4. To grant a permission, enable the checkbox next to that permission's name.
  5. Once you have navigated through each icon and selected all the necessary permissions for the role, click Save Permissions. The role, with its defined permissions, is now created and ready for assignment.
Assigning Roles to Admin Users

After roles are defined, you can assign them to your administrative users.

  1. Click System Configuration, then Admin Management, and click Edit Admin Users. The Manage Active Administrators page will display.
  2. Select an existing user you wish to modify, or choose to create a new user.
  3. On the left side of the screen, add or confirm the User Information (e.g., name, email).
  4. On the right side, select the role(s) you wish to apply to that user from the available options.
  5. You can also add a Comment for any relevant notes about the user's role or status.
  6. Click Update User when you have finished making your changes.

Best Practices & Considerations

Manage Administrator Groups

    Administrator Groups in OPS-COM allow you to organize administrative users into logical teams or departments. This feature simplifies management by enabling you to apply specific settings, distribute communications, or assign tasks to a collective of administrators rather than managing each user individually, enhancing organizational efficiency and control.

    Using this Feature

    1. Click System Configuration, then Admin Management, and click Manage Groups.

    You'll be directed to the Manage Administrator Groups page, which lists all existing groups. Initially, this page may be empty if no groups have been created yet.

    Creating a New Administrator Group
    1. Click Add New.
    2. The Adding New Group form will appear where you can define your group.
    3. Fill out the required information for the group, such as the Group Name.
    4. Click Save Group to finalize the creation.

    Once saved, your newly created group will appear in the list on the left-hand side of the page.

    Working with Groups

    After creating groups, you can perform various management actions. While the provided content focuses on creation, typical group management also involves:

    • Editing Group Details: You can usually click on a group's name or an Edit button next to it to modify its name or other associated settings.
    • Assigning Administrators to Groups: Administrators are assigned to groups through their individual user profiles.
      1. Navigate to System Configuration, then Admin Management.
      2. Click Edit Admin Users.
      3. Select the desired administrator.
      4. Within their profile settings, you'll find an option to assign them to one or more Admin Groups.
    • Deleting Groups: Most systems allow you to delete groups that are no longer needed, often with a confirmation prompt. Be aware that deleting a group might impact any administrators or settings associated with it.

    Best Practices & Considerations

    • Logical Organization: Create groups that reflect your organizational structure (e.g., "Enforcement Team," "Permit Office Staff," "IT Support"). This makes it easier to manage permissions, communicate, and assign responsibilities.
    • Streamlined Management: Using groups simplifies tasks like sending system-wide messages or applying default settings, as you can target a group rather than selecting individual administrators.
    • Clarity in Naming: Use clear and concise names for your groups to avoid confusion among administrators.
    • Regular Review: Periodically review your Administrator Groups to ensure they remain relevant and accurately reflect your team's structure and needs. Remove any outdated or unused groups to maintain a clean system.

    Manage Admin User Accounts

    Creating and managing administrator accounts in OPS-COM is essential for granting system access to staff, defining their responsibilities through roles, and maintaining secure and accurate user records. This article guides OPS-COM administrators through the process of creating new admin accounts, editing existing ones, resetting passwords, and disabling accounts as needed.

    Using this Feature

    1. Hover over System Configuration, click Admin Management, then Edit Admin Users. The Manage Active Administrators screen displays, providing options for both new user creation and existing user modification.
    Creating a New Admin Account
    1. On the Manage Active Administrators screen, select + Create New Admin.
    2. The screen will display the Create New Administrator form divided into two sections:
      • On the left, you will enter the user information for the new administrator (e.g., username, first name, last name, email, and initial password).
      • On the right, in the Active Roles form, you will select the admin role(s) this person will be granted. For more information about Roles and Permissions refer to this wiki article.
    3. Once all information is entered and roles are selected, click Insert New User to add the admin account to the system.
    Editing an Existing Admin Account
    1. On the Manage Active Administrators page, select the user you wish to modify.
    2. You can now change any of the available options for that selected user, including their personal information, roles, and account status.
    3. Click Update User when you are finished making your changes.
    Viewing Login Activity
    Resetting an Admin's Password
    1. Locate the specific administrator's account. 
    2. In the Password field, enter a temporary password. The password is hidden (displayed as asterisks "**********"), but you can simply type over the existing symbols.
    3. Inform the admin of this temporary password.
    4. When the admin logs in using the temporary password, they will be prompted to update their password to a more secure, personal one.
    Disabling an Admin Account

    Admin users cannot be permanently deleted from the system because their accounts are often linked to historical data (e.g., ticket issuance, system changes). If an admin user changes roles or leaves the organization, the best practice is to disable their account.

    Important Reporting Note - It is very important to leave the admin user's permissions in place even when disabling their account, as these permissions will still affect historical reporting (e.g., showing which permissions were active at the time certain actions were performed). Once the account is disabled, any existing permissions obviously cannot be actioned by that user, but they remain associated for reporting purposes.

    1. Hover over the System Configuration menu, click Admin Management, then Edit Admin Users.
    2. Select the user's account you wish to disable (e.g., "jim_daniels").
    3. The user's profile will display. Locate the checkbox titled Activate this account and allow system login.
    4. Uncheck this box to disable the account.
    5. Click Update User to apply the change.

    After disabling, the account will now appear on the Manage Disabled Administrators page, accessed by clicking on View Disabled on the Manage Active Administrators page.

    This action can be reversed at any time by editing the user account and re-checking the Activate this account and allow system login checkbox.

    Best Practices & Considerations


    IP Filtering for Admin Users

    IP Filtering in OPS-COM provides administrators with a robust security layer by restricting user access based on their device's IP (Internet Protocol) address. This feature enhances system security by ensuring that only authorized users from specified networks or devices can log into OPS-COM, allowing for tailored access control according to individual roles and organizational security policies.

    Setup & Configuration

    IP filtering configurations are managed within each administrator's user profile in OPS-COM.

    What is an IP Address?

    An IP address is a unique numerical label assigned to each device connected to an IP network. It typically consists of four groups of numbers (octets), separated by dots (e.g., 192.168.1.1).

    To Configure IP Filtering in OPS-COM:

    1. Hover over the System Configuration, then Admin Management, and click Edit Admin Users.
    2. On the Manage Active Administrators page, select the specific user you wish to edit.
    3. Locate the Allowed IPs field within the user's profile configuration. This is where you will enter the IP filtering rules.

    2025-06-17_10-10-50.jpg

    Using this Feature

    The Allowed IPs field in an admin user's profile controls their access to the OPS-COM system. The level of access can be precisely tailored:

    Configuration Options for Allowed IP Addresses

    Allow Access from Any Network (Least Restrictive)

    This is typically used for high-level managers or directors who require access from diverse locations (e.g., while traveling, from a home office, or an internet cafe).

    Note: In some cases, networks might be locked down or behind a firewall. Additional configuration on the part of your IT department may be required to allow external access.

    Restrict Access to a Specific Network

    This is ideal for regular office workers who primarily require access only from their designated office network.

    Restrict Access to a Specific Computer (Most Restrictive)

    This is suitable for part-time employees or student workers who are designated to use only one particular machine for OPS-COM access.

    Allow Access from Multiple Specific Computers

    This is useful in office settings where an employee may use a few designated workstations.

    Allow Access from Multiple Specific Networks

    This is applicable for employees working out of multiple campus locations or different buildings within a municipal organization, each on a distinct local area network.

    Basic IP Filtering Rules Recap

    Best Practices & Considerations