Configuration Guide

User Roles andAccess Controls
29 of 291
the types of changes they can make. Parts of the UI features are not available to
users whose role does not authorize access to those features. The Guest and IoT
Manager application facilitates the following user roles.
The three roles defined with different access control in the system are:
l Guest and IoT Manager Administrator Role
l Provisioner Role
l Guest Users Role
Guest and IoT Manager Administrator Role
The Guest and IoT Manager Application has single Administrator account. The
Administrator of this account can set / modify access rights such as Username,
Password, delete Guest User accounts, Device records and can also perform the
following actions.
l Create the Onboarding Template.
l Configure application settings.
l Create and manage the Provisioner accounts. Each account has its own
Username and Password.
l Connect the application to the Extreme Management Center appliance. The
Administrator must ensure that the connection is stable for the Provisioners
to use it.
l Manage Guest User accounts and Device records to remove the expired
user accounts.
Provisioner Role
The Provisioner uses the Guest and IoT Manager application to manage Guest
Users and Devices that they have created.
Each provisioner account is stored either in the Local Password Repository
(LPR) internal store or in Lightweight Directory Access Protocol (LDAP).
Important:
Guest Users and Devices onboarded by the Provisioner can only be
managed from Guest and IoT Manager.