Advanced role-based access control
The previous iteration of X4 Remote already allowed for the creation of groups and permission settings, and, thanks to the feedback of our loyal customers, these functionalities have been greatly improved. The new X4 Remote provides additional options to set up an individual role based access according to each user’s needs and permission status. You also have the ability to assign user roles and groups and set permissions according to different access categories. With the new possibilities one can easily make a distinction, for example between various customers’ roles, partners and service teams.
In the new X4 Cloud user management system, each user is assigned a role (e.g., as service engineer or machine operator). In the Admin App you can create roles for specific user types with unique access rights. All managers of roles, access groups and group types are able to define these roles and to invite users.
With access categories the administrator manages which user can access specific machine information using one or more access services e.g., VPN, VNC, HTTP or Websockets. For example, the machine operator is granted access to a production dashboard with an HMI panel whereas the service engineer can use a maintenance page and receive service notifications via VPN and HTTP.
Within groups you are able to create a flexible structure in order to grant users access to specific devices. For example, you can create specific groups for certain customers, regions or machine types.
With the new X4 Cloud you don’t have to worry about security issues. We know it’s not desirable for customers to be able to change advanced settings. Additionally, partners should not have remote access to every machine. For this reason, you can now give individual users their own rights. Categories can be assigned to user groups, and it is also possible to individually set permissions on a user level. For example, as an administrator you are able to exclude customers from managing pages and enable engineers to view the audit trail and licenses. To further secure the account, it is possible to implement a mandatory two-factor authentication.
Once everything has been configured, each user who has access to the platform only has the rights he needs and, crucially, only sees what is important for his work. This makes it possible to work together optimally – and avoids distractions by an abundance of unnecessary information. In addition, the value of your machines has been maximised with no need to worry about security issues or essential settings being changed.
We’ve collected a few best practice examples to help you efficiently structure your X4 Remote company, read them here.
Get started with X4 Cloud
Create your free X4 Cloud account to find out more.
Order your x500 gateway to try the platform for yourself!