End User Permission Settings Explained

Topic

This article provides information about the various permission options NinjaOne offers for end user accounts.

Environment

NinjaOne Platform

Description

You can use roles to set the same permissions for multiple technicians and end users. Refer to User Roles for more information. If you assign an end user to a role, you cannot view individual permission options. Instead, open the End User Roles or Technician Roles editors in the Accounts section to update these sections.

Select a category to learn more.

Creating or Accessing Accounts
End User Configuration

Important Considerations

You must activate the toggle switch at the beginning of each Permissions page to configure the settings.

end user_enable permission.png — **Figure 1:** End user account → Enable the permission configuration

By default, specific permissions will automatically update to provide recommended access levels after you enable the section. You can change the selection by choosing a new permission level from the drop-down menu.

For some Permission sections, you can set Default Access, which determines the access level for all subsequent permissions within a category. For example, you can set the default access to all organizations to "View," but then change the access level for a single organization to "View, Update, Delete." To change the default access, select the checkbox next to the individual organization name and then click Edit Permissions.

role_change default access for single org.png — **Figure 2:** Change the default access for a single organization (click to enlarge)

Creating or Accessing Accounts

Access end user and technician accounts at Administration → Accounts → All users. For instructions to create a new user or technician account, refer to NinjaOne Platform: Create a Technician Account.

End User Configuration

From Administration → Accounts → All users, select an account to view the following sections in their account editor.

end user_permission sections.png — **Figure 3:** End user account and permission options

Select a topic to learn more about it:

General
Devices
Roles
Permissions: Connections
Permissions: Backup
Permissions: Ticketing

General

The General tab contains three subtabs:

Basic Details:

Field	Description
Enabled	The account is active, and the user can log in. Deactivating the account will lock the user out of NinjaOne but will not delete it, so that it can be reinstated at a later time.
Name	The end user's first and last name.
Email	The invitation to log in to NinjaOne is sent to this account, and the end user will use this account for all future access to their portal.
Password	Click Reset Password to resend the NinjaOne invitation. The end user will be prompted to create a new password.
Phone	If you select "SMS" in the Security tab, the end user's personal or work mobile number will be used to complete authentication.
Organization	This option provides access to view a specific organization or all organizations. You can either grant access to all organizations or to only one, but not a customized selection.

Display: Select the default language to display on the end user's portal.
Security: Select the authentication type for the account:
- Native: Allow native authentication and turn off single sign-on (if configured).
- Single sign-on: Require single sign-on and turn off native authentication.

end user_general_tabs.png — **Figure 4:** End user account → General

Devices

Click Add Device(s) to associate devices owned by a particular organization. You can add as many devices as necessary by selecting the checkbox next to the device name.

The Add Device(s) action only grants the end user access to the device; it does not make the end user the device owner. You can change the device owner from the device dashboard Settings tab. Refer to Add or Change Device Owner for more information.

To delete a device, select one or more checkboxes next to the device name and then click Delete at the top of the page.

end user_add or delete device.png — **Figure 5:** End user account → Add or delete assigned devices

Roles

All currently configured roles display in this tab. You can search for roles by typing the name of a role into the search bar. Add new roles for the user by clicking Add Role in the top right corner of the page. Refer to User Roles for more information.

If you assign multiple roles to a technician, the role with the most access will take priority.

To remove a role, select one or more of the checkboxes next to the role name and then click Remove Selected Role.

user roles_add remove.png — **Figure 6:** Add or remove assigned roles

Permissions: Connections

Select which remote access tool has access to which operating systems.

Permissions: Backup

Allow users to restore files from devices when backup is enabled.

Permissions: Ticketing

Allow users to submit tickets through their end user portal. Select an option from the top drop-down menu to allow users to view, update, and create tickets belonging to the organization to which they were assigned access (regardless of who submitted the ticket); if you do not provide access for all organization tickets, the user can only review the tickets they submitted.

If you assign the user to all organizations in the General tab, the second drop-down menu in Ticketing will be unavailable, and the top drop-down menu will assume access for all organizations.
If you grant the user access to a single organization, selecting Allowed for organization-wide ticketing access will display all tickets associated with that organization to the user. However, users can only leave comments on the tickets they have reported.
If the organization associated with a ticket changes and the ticket reporter does not have access to the new organization, you must update the Reporter field to someone who does.

The following figure provides an example of an end user portal with access to all ticketing within an organization.

Additional Resources

Refer to User Management: Resource Catalog to learn more about managing users and technicians in NinjaOne.