User Administration and Role-based Access Control (RBAC)

As an admin of the Celona network, you can create/edit/delete user profiles, explicitly define their role, and manage access accordingly.

At an organizational level, Celona Orchestrator supports the following user roles -

Admin - complete read and write privileges for all monitoring and management workflows in the Orchestrator
Observer - read-only access to the Orchestrator
Installer - Certified Professional Installer user with
- read access to AP Inventory
- read access to AP Details
- read and write access to their own user profile to set up CPI certificate credentials
- read and write access to AP antenna parameters to set and attest the location (Latitude/Longitude) of the AP
Device Manager
- read-only access to the Orchestrator, similar to the Observer role
- read-only access to Device inventory and Device details page
- QR code download for eSIMs
- Device (SIM) lifecycle management, including activation, assignment, deactivation, and naming of the devices

Orchestrator supports User administration and Identity management via

Single sign-on (SSO), using the customer's Identity Provider (IdP)
Orchestrator workflows (see below)

Create User

Admin users of an Organization can create additional user profiles and assign them a role. To create a new user profile, go to Users under Admin Settings, click on ADD USER on the top right corner. Enter the following information -

First Name (Mandatory)
Last Name (Mandatory)
Email (Mandatory)
Mobile (Optional)
Access Control - Role
- Admin, Observer, Installer, Device Manager

Edit User

Admin users of an Organization can also edit or delete user profiles. To edit an existing user's profile, go to Users under Admin Settings, find the user in the table, and click the edit icon. You can now make any desired changes and click Update to save your modifications.