User Management & Access Control
Shoplogix IMS uses role-based access control with eight privilege levels. Each user is assigned a role that determines what they can view and modify.
Privilege Levels
| Role | What They Can Do |
|---|---|
| Read-Only | View assets, sensor data, and dashboards — no changes |
| Customer User | Full CRUD on machines, steam traps, sensors, and files for their assigned account |
| Customer Admin | Everything Customer User can do, plus manage users and their privilege assignments |
| Asset Manager | Manage customer accounts, gateways, and assets; install and reassign sensors |
| Developer | Manage API credentials, webhook subscriptions, and MQTT outbound streams |
| IT Admin | Create and manage user accounts and privilege assignments |
| Integration Partner | Asset management plus access to partner integration data (e.g., Armstrong SAGE) |
| Super Admin | Full unrestricted access to all resources |
Authentication
Insights uses OAuth 2.0 with Auth0 for authentication. Users log in with their email address through the standard sign-in flow. Your IT Admin or Customer Admin manages account provisioning.
If your organization uses a centralized identity provider, SSO can be enabled so users with your email domain authenticate through your IdP. See Single Sign-On (SSO) for details.
Adding Users
Users with Customer Admin, IT Admin, or Super Admin roles can invite new users and assign their privilege level through the user management section in Insights:
- Open the Options menu and select Management → User Management.
- Select Add User.
- Enter the new user's name, email, and customer account.
- Select the appropriate privilege level from the role menu.
- Enter a temporary password.
- Select Add User to create the account.
- Share the temporary credentials with the new user through a secure channel — the platform does not email credentials automatically.
API Access
If you need programmatic access (for integrations or automation), the Developer role can generate API credentials. See Data Services & API for details.
A Customer Admin or IT Admin can also grant API access to an existing user of any role without changing their base privilege level — this is a separate developer-access flag on the user's account, toggled from the same User Management screen, that lets that user generate a client ID and access tokens alongside their normal permissions.