Setting up limited administrator rights for Public Spot managers

It is possible to allow employees to create and manage user accounts even though they do not have access rights to the device configuration. This is done by setting up a limited administrator, who only has the right to use the Public Spot Wizard. This tutorial describes the steps and the necessary access rights and privileges to do this in LANconfig.

The rights to use the Public Spot Wizards are configurable separately from one another, so it is possible to restrict a limited administrator to any single Wizard. In the case of the Public Spot setup wizard, the restricted administrator logging in to WEBconfig is automatically forwarded to the corresponding input mask.

In LANconfig, open the configuration dialog for the device you want to add a Public Spot administrator to.
The Public Spot option has to be enabled on this device.
Navigate to the item Management > Admin. In the section Device configuration, click Further administrators and then click Add.

To allow an existing user to perform Public Spot management, you instead select the user's entry in the table and click on Change.
You activate the profile by checking the Entry active box.
Assign a descriptive name in the field Administrator.
Enter a Password and repeat it as a check.
Set the Access rights to None.
In the section Function rights enable the options Public Spot wizard (add user), and Public Spot wizard (manage user) for the Public Spot setup wizard.

Note: The function right Public Spot XML interface is not required by a Public Spot administrator. The right is only relevant if you use the XML interface and should not be combined with the function rights described above for security reasons.
Save the new or modified administrator profile by clicking on OK.

If you have granted the feature rights to several Wizards, the limited administrator can navigate between these using the navigation bar in WEBconfig.

If you have set the function right for the Public Spot Wizard (create user) only, then a limited administrator can only navigate within this Wizard, and the navigation bar is hidden. In this case it is not possible to logout of WEBconfig manually. For security reasons, this means that the lifetime of the WEBconfig session is very short. In case of inactivity, the device automatically logs out the limited administrator.

Note: For technical reasons, the Create Public Spot Account wizard does not update automatically after use of the Create and CSV export button. A limited administrator who wishes to set up additional users and print vouchers must invoke the Wizard again (e.g. via a URL or by refreshing the web page if the navigation bar is hidden).