Access Control Settings - Web Manager

Access control is managed by means of two features: Labels and the RBAC tabs that are available for each access profile.

RBAC Settings for Access Profiles

---

The following customization options are universally available across all access profiles, providing a consistent framework for managing how and when users can access remote resources.

Access Hours

This feature allows administrators to set specific access hours, limiting when users can log in to corporate resources. By defining approved working hours, organizations can reduce risk and control access more effectively, ensuring that resources are only accessible during authorized times. This feature is particularly useful for maintaining security compliance, reducing unauthorized access, and protecting sensitive data during off-hours.

Option	Description
Access Allowed	Define which day and hour the profile will be available.
Access Denied	Define which day and hour the profile will be unavailable.
Allow Access only within a specific period	Define a time period when the application will be disabled or enabled.

Permissions

The Permissions tab allows managing the access permissions for the selected connection (access profile).

Option	Description
Inherit label access permissions	Enable the profile to inherit the permissions of an already created parent label.
Allow anonymous access	Make the profile available for anyone who accesses Thinfinity® Workspace. Authentication will not be required.

Restrictions

You can whitelist or blacklist the IP Addresses allowed to connect to a profile.

Resource Reservation

Option	Description
Booking limit	Determines the number of concurrent reservations for the resource.
Buffer	The buffer size in which concurrent reservations are allowed, even if they are later adjusted by the reservation limit.

Labels

The Label feature allows the admin organize connections into groups and collectively manage the permissions settings for several access profiles at the same time. A Label is essentially a folder where the admin can place connections and keep them organized. Also, Labels can be organized into nested structures according to the specific needs of each company.

To access the Label settings, in Thinfinity® Workspace home page click the + button next to the Home icon.

The following options are available:

Label Configuration: General Tab

You can set a name and a color for the new Label.

Label Configuration: Permissions Tab

Add valid users or groups to control access to the contents of the Label. They must be pre-defined in AD or on the local machine.

Option	Description
Inherit label access permissions	When working with nested Labels, this option is selected by default and ensures that all the access profiles (connections) within the current Label inherit the permissions settings from the parent Label. De-select it to customize the permissions settings for each access profile in the current Label.
Reset all child object permission entries	This feature allows you to reset the permissions on all files and folders within a selected Label to the same permissions as the parent folder.