Permission Groups
SAS has a very flexible permissions system allowing admins to create any type of managers. Each manager must belong to a permissions group. Groups can be created from Settings->Permissions. To create one, go to Actions and select ‘Create’, giving it a proper name. Later, select the newly created group from the list. Below the list, there will be two trees, the right one is for the available permissions, and the left one is for the given ones. Select the desired permissions from the right tree and move them to the left tree using the arrows in the middle.
The table below explains the meaning of each permission type:
Regular | Use with Caution | Dangerous |
Category | Name | Description |
Users |
Activate
|
Allows user activation via manager |
Users |
Activate using voucher
|
Allows manager to activate users using vouchers |
Users |
Activate using manager balance
|
Allows manager to activate users using the available manager balance |
Users |
Activate using user balance
|
Allows manager to activate a user using the balance available in the user account. |
Users |
Edit Advanced Fields (dangerous!)
|
Allows the manager to edit user data such as the expiration, profile. This is dangerous and should not be given to regular managers. Meant to be given only for system administrators. |
Users |
Purchase Addons
|
Allows the manager to activate addons for the user. Addons could be things IPTV, VOIP... Addons are creating from the profile page as a special type of profiles. |
Users |
Cancel Scheduled Profile Change
|
Allows the manager to cancel a scheduled profile change in the future for a user he owns. |
Users |
Change Profile
|
Allows the manager to change service profile for expired users only. |
Users |
Change Profile of Active Users
|
Allows the manager to change service profile for activate users. This is not recommended as it is not logical to change the profile for active users only the fly. Usually their should be a procedure for this action, such as canceling the current subscription and refunding the users first. |
Users |
Create
|
Allows the manager to create new users |
Users |
Delete
|
Allows deleting users. |
Users |
Deposit Money
|
Allows the manage to deposit money into user's wallet. The deposited amount will be deducted from the manager's balance. |
Users |
Disconnect
|
Allows disconnecting online users. |
Users |
Show User History
|
Show users history log. This will list all events and actions made on the selected user. |
Users |
Index
|
Lists users belonging to the manager |
Users |
List All Users
|
Lists all users in the system regardless of their owner. This is useful for support managers. |
Users |
List All Group Users
|
This will let the manager to list all users belonging to the same group of the manager. This is useful to be given for group managers. |
Users |
Show Users Invoices
|
Lists all user invoices. |
Users |
Show Users Journal
|
List user journal entires. These entries are the financial transactions made by or on the user. |
Users |
MAC Lock User
|
Permits locking the user on a specific Mac address. |
Users |
Ping
|
Allows pinging the user via the router. This feature is available for Mikrotik only. |
Users |
Rename
|
Allows renaming users. |
Users |
Reset Daily Quota
|
Resets the traffic consumed by a user during the day. |
Users |
Show Sessions
|
Shows user connection sessions. |
Users |
Update
|
Allows updating users. |
Users |
Withdraw Money
|
Allows money withdrawal from the user. The deducted amount of money will be transferred to the manager who performed the action. |
Users |
Export to Excel
|
Allows exporting users list into Microsoft Excel file. |
Users |
Extend Service
|
Allows extending user service via Extension Profiles. |
Users |
Cancel Subscription
|
Allows canceling user subscription. |
Users |
Reward Points System
|
Enabled the use of reward points by the manager to activate or extend users with loyalty points. |
Users |
POS
|
When this permission is given, the manager won't be able to see users list. However, it will be possible to search for users by their exact username or phone. This feature is useful for point of sales booths where the manager shouldn't see all existing users, while still being able to activate users not belonging to him. |
Users |
Live Traffic Monitor
|
Allows monitoring user's live traffic via SNMP. |
Users |
Delete Active Users
|
Allows deleting activate users. Not recommended for regular managers. Activate users should not be deleted without canceling their subscription. |
Users |
Show Support Tickets
|
Shows support tickets submitted by users. This permission should be given to support personnels. |
Users |
Show Freezones Traffic
|
Shows freezone traffic data. |
Users |
Show Password
|
Shows user's dialup password in the User Overview page. |
Users |
Edit MAC addresses
|
Allows editing the list of allowed MAC addresses for the users. |
Users |
Add Traffic
|
Allows adding extra traffic for the user. This permission is not recommended for regular managers. |
Users |
Auto Renew
|
Sets the auto renew flag for users. Auto renew works only if the user has enough balance to activate his service profile |
Users |
Compensate
|
Allows requesting compensation for users. Compensation could be days, hours, traffic. The requested compensation should be approved by a higher manager to be applied. |
Users |
Approve Compensations
|
Allows approving reviewing and approving (or rejecting) compensation requests submitted by managers. |
Users |
Change Parent
|
Allows changing user's parent. |
Managers |
Change Self Password
|
Allows managers to change their passwords |
Managers |
Create
|
Allows creating new managers. This should be given to managers who are allowed to create sub managers. |
Managers |
Delete
|
Allows deleting managers. |
Managers |
Deposit Money
|
Allows adding balance to other managers. |
Managers |
Index
|
Lists sub-managers belonging to the logged in manager. |
Managers |
Index (All Managers)
|
Lists all system managers. This should not be given to regular managers and meant to be used by HQ personnels. |
Managers |
Show Invoices
|
Shows manager invoices. |
Managers |
Show Journal
|
Shows manager journal entries. |
Managers |
Login As (Dangerous!)
|
Allows the manager to login as another manager without using their passwords ! This is a very dangerous permission and should be used with caution. Meant to be used only by support personnels. |
Managers |
Show Receipts
|
Shows manager receipts |
Managers |
System Administrator
|
Give the manager a system administrator privileges. Managers with this permission have total control over the system. |
Managers |
Edit / Update
|
Allows updating manager's data |
Managers |
Withdraw Money
|
Allows deducting money from managers. |
Managers |
Export to Excel
|
Allows exporting managers list to a Microsoft Excel file. |
Managers |
Rename
|
Allows renaming managers. |
Managers |
Two Factor Auth (2FA)
|
Allows the manager to setup two factor authentication for himself. This requires using a 2FA app such a Google Authenticator. |
Managers |
Lock managers to PPP service
|
Allows the manager to lock users of sub-managers to specific PPP service. Users locked on PPP service name will not be able to dial-up from different PPP services. |
Cards |
Change Owner
|
Changes the owner of card series |
Cards |
Delete
|
Deletes card series |
Cards |
Designer
|
Allows access to the card design system, enabling the manager to create card templates for PDF download |
Cards |
Download
|
Allows downloading cards series, in CSV & PDF formats. |
Cards |
Generate Refill Cards
|
Generates refill cards |
Cards |
Generate Prepaid User Cards
|
Generates prepaid users cards |
Cards |
Cancel Generator
|
Cancels a generator job in progress. |
Cards |
Series Index
|
Lists cards series. |
Cards |
Suspend & Release
|
Allows manager to suspend or release cards series. |
Cards |
List PINs
|
Allows listing all cards of a specific series. |
Cards |
Verify Cards
|
Allows managers to verify card status by its PIN or serial number. |
Cards |
Change Owner (Range)
|
Allows changing the ownership of a range of cards to a new owner. |
Groups | Assign | Allows the manager to assign a user or manager to a group he belongs to |
Groups | Create | Allows creating groups |
Groups | Delete | Allows delete groups |
Groups | Update | Allows updating groups |
Groups | Index | Permit listing available groups. |
NAS | Index | Shows list of available NASs |
NAS | Create | Allows defining new NAS into the system. |
NAS | Update | Allows updating existing NASs |
NAS | Delete | Allows deleting NASs from the system |
NAS | Export | Allows exporting system NASs to external file |
Profiles | Index | Allows listing system profiles |
Profiles | Create | Allows creating new profiles |
Profiles | Delete | Permit deleting existing profiles |
Profiles | Update | Update existing profiles |
Profiles | Pricing Management | Defines new pricing schema for sub managers |
Profiles | Custom Radius Attributes | Allows settings custom RADIUS attributes per profile |
Profiles | Policy Manager | Allows managing profiles daily policies |