LogoLogo
DownloadGet a QuoteConnect with Us
  • Introduction
    • What is Thinfinity® Workspace
    • About this Document
  • Product Overview
    • Architecture Components
    • Load Balancing
    • Deployment Scenarios Overview
    • Connectivity
      • Remote Desktop Access
      • Remote Application Access
      • Terminal Access
    • RPAM and Resource Reservation
    • Cloud Manager
    • Audit Logging
    • User Analytics
  • Getting Started
    • Basic Installation
    • Accessing Thinfinity® Workspace in Your Browser
    • Connection Types
      • Remote Desktop Connection
      • Remote App Connection
      • Remote Intranet Web App Connection
      • Telnet SSH Connection
    • Configuration
    • Security
    • Beyond the Basics
  • Reference
    • Thinfinity® Workspace Configuration Manager
      • General Tab
      • Broker Tab
      • Authentication Tab
        • Methods Tab
          • API Access Settings
          • RADIUS Settings
          • SAML Settings
          • OAuth 2.0 Settings
          • External DLL
        • Mappings Tab
        • 2FA Tab
        • Directory Services Tab
          • Local Computer Users Settings
          • Local Computer Users
          • Local Thinfinity IdP Settings
          • Computer Domain Settings
          • External Domain Settings
      • Access Profiles Tab
        • The [+] Access Profile
        • Desktop Access Profiles
          • RDC Access Profile
            • Core Settings
            • User Experience Settings
          • ThinVNC Access Profile
          • VNC/RFB Access Profile
            • User Experience Settings
        • Application Access Profiles
          • Remote App Access Profile
            • Core Settings
          • Web App Access Profiles
            • Web Link Access Profile
            • WAG Access Profile
          • VirtualUI App Access Profile
            • Core Settings
        • Web Folder Access Profile
        • Terminal Access Profiles
          • z/Scope Classic Access Profile
          • Telnet/SSH Access Profile
            • Core Settings
            • User Experience Settings
        • Label
        • Access Control Settings
      • VirtualUI Tab
      • Folders Tab
      • Permissions Tab
      • Protection Tab
      • Notifications Tab
      • Database Tab
      • z/Scope Classic Tab
      • Services Tab
      • License Tab
    • Thinfinity® Workspace Web Manager
      • Access Profiles
        • Desktop Access Profiles
          • RDC Access Profile
            • Core Settings
            • User Experience Settings
          • VNC
            • Core Settings
            • User Experience Settings
          • Thinfinity VNC
            • Core Settings
        • Application Access Profiles
          • Remote App
          • Web App
            • Web Application Gateway (WAG)
            • Web Link
          • VirtualUI App
        • Web Folder Access Profile
          • Core Settings
        • Terminal Access Profiles
          • Telnet SSH Terminal
          • Multi Terminal
        • Access Control Settings - Web Manager
      • Addons
        • Analytics
        • Brokers Monitor
        • Audit Log
        • Recordings
        • Members
        • Reports
        • Resource Reservation
    • Thinfinity® Gateway
  • Configuration
    • RBAC and Resource Reservation
      • Configuring the Resource Reservation Feature
      • Role Definition with Permissions Groups
      • Granting Approver or Requester Role to a User
      • Enabling Resource Reservation
      • Granting a User Access to a Single Access Profile
      • Granting Access Permissions for a Group of Access Profiles
      • Grouping Access Profiles Under a Label
      • Restricting Access to a Resource
      • Exception Days - No Booking Allowed
      • Booking a Resource
      • Approving a Booking Request
    • Security
      • Managing the SSL Certificate
        • Creating a Self-Signed Certificate
        • Creating a CA Certificate Request
        • Importing a Certificate
        • Using ACME Certificates
      • Session Recording
        • Viewing Recorded Sessions
    • User Experience
      • Bidirectional Audio Redirection
      • Customizing the Thinfinity® Workspace Toolbar
        • Using web.settings.js
        • Using the SDK 'connect' Method
        • Extend the Thinfinity® Workspace Toolbar
      • Customize Translation
      • GFX and H.264 Support
        • Enabling H.264 for an Access Profile
        • Preparing a Remote Desktop for H.264 Support
      • How to Enable Multi-Monitor
      • Multi-Touch Redirection
      • Redirecting Devices
      • Remote FX
      • Enhanced Browser and DPI Support
        • Display Model Inheritance
        • Properties Reference Tables
        • The Calculation Process
        • Example
    • Extended Features
      • Remote Active Directory
        • How to Install and Configure Thinfinity® Remote AD Services
        • Active Directory Credentials Mapping
      • WebBridge - Direct File Transfer
        • Installing Thinfinity® WebBridge
        • Using WebBridge
      • Silent Install Options
    • License Server Manager
      • Proxy Activation
      • Get a New Trial Serial Number
      • Activate a Serial Number Online
      • Activate a Serial Number Offline
      • Registering a License with License Server Manager
  • Deployment Scenarios
    • Single Machine Deployment
    • Distributed Deployment
    • Multitenant - Several Subdomains
    • Implementing Secondary Brokers Scenarios
      • Resource Pools
      • OT Networks
      • Multitenant - Single Domain
  • Integrations
    • Integrating Thinfinity® Workspace
    • External Authentication
      • API Key
    • Customizing the Web Interface
      • Customizing the Logo
      • Organizing custom files
    • One-Time-URL (OTURL)
      • Customizing OTURL Connection
      • Enabling Features
  • Mobile Devices
    • Mobile Devices
    • Accessing Thinfinity® Workspace
    • Mouse Control
    • Keyboards and Toolbars
    • Gestures
Powered by GitBook
On this page

Was this helpful?

  1. Configuration

RBAC and Resource Reservation

PreviousThinfinity® GatewayNextConfiguring the Resource Reservation Feature

Last updated 2 months ago

Was this helpful?

The RBAC and resource reservation system is implemented by means of the permissions groups. Permissions can be strategically combined and organized into groups to establish a range of specialized roles, each catering to different aspects of the booking process. This modular approach allows for the creation of roles that are specifically designed for distinct functions within the resource reservation system and allow access only to specific functionalities. For instance, some roles might focus on the initial request of a reservation, enabling users to efficiently book resources. Others could be tailored towards the administrative side, overseeing the management, approval, and scheduling of these reservations. This level of customization ensures that each role is equipped with the appropriate permissions to effectively carry out its designated responsibilities, from the initiation of a booking request to the comprehensive management of the reservation lifecycle

To create roles according to your organization's needs you can combine different permissions such as 'Requires Authorization', 'Can Authorize', or 'Can Self Book'. Once a role is defined, it can be assigned to multiple users or user groups, aligning seamlessly with your organization's workflow and operational needs.

Here is a list of the basic procedures necessary to set up RBAC and resource reservation:

Configuring the Resource Reservation Feature
Role Definition with Permissions Groups
Granting Approver or Requester Role to a User
Enabling Resource Reservation
Granting a User Access to a Single Access Profile
Granting Access Permissions for a Group of Access Profiles
Grouping Access Profiles Under a Label
Restricting Access to a Resource
Exception Days - No Bookings Allowed
Booking a Resource
Approving a Booking Request