You can configure settings such as the roles and permissions that allow employees to access TrackTik features, safelist IPs, and set a password policy.
Settings > Roles & Security
Options:
-
Roles/Permissions
- Determine the features that your users can access.
-
Password Policy
- Set password restrictions for your account.
-
IP White list
- Allow access to laptops that are used to access TrackTik instead of a device. An example is a security guard assigned to a fixed location, such as a front gate.
-
Sign-in Log
- User’s sign-in/out history.
Roles and Permissions
You can configure the features that your users can access by assigning each user to one of the pre-configured default roles.
Default Roles include:
- Admin Portal Roles: Administrator
- Admin Portal Roles: Manager
- Staff Portal Roles: Guard
- Client Portal Roles: Client Role
You can reach out to your TrackTik client success representative for assistance in configuring custom Roles and Permissions.
To ensure only superusers see live dashboards and Data Lab:
- Remove dashboard visibility from non-superuser roles: go to Settings ->Roles/Permissions -> Admin Portal Roles, and uncheck View the dashboard and View data lab for those roles.
- Confirm the user is not tagged as Superuser. The Superuser flag overrides many visibility restrictions.
- Ask the user to log out/in or clear the browser cache.
- Verify the change on a test account.
If a Manager still sees live updates after you uncheck those permissions, review:
- Multiple roles assigned (another role may grant dashboard access).
- Cached session.
- Custom dashboards shared via direct links that bypass navigation controls.
Password Policy
Set the password to the minimum requirements for TrackTik users in this tab.
Disallow user info (First and Last name): Check this option to prevent users from including their first and last names in passwords.
Disallow passwords already used: Check this option to prevent users from using passwords they have already used.
Avoid commonly used popular password: Check this option to prevent users from using easy-to-guess passwords.
IP Whitelist
Configure this option to safelist IP addresses and prevent users from logging in if they are not doing so from an IP address on the safelist.
IP to authorize: Enter the IP address you would like to whitelist.
IP Label (Optional): Enter a name or description for the safe listed IP. Choose something meaningful and descriptive.
Scenarios (Block at login): When this option is checked, employees cannot log in if they are not doing so from an IP address on the safe list.
Sign-in Logs
Under this tab, you can track the employees who signed in and from which IPs they signed in.
User: The first and last name of the user.
IP: The IP address from which the user logged in.
Time: The time and date stamp of the sign-in.