Administration

Overview

This chapter covers all administrative tasks such as setting up an organization, managing its settings, and managing users, groups and their permissions.

All these tasks require certain access rights that you obtain by being a member of a group. For an overview of the available roles, see Default Groups & Permission Sets.

User, group and permission management is found under the Administration module in the main navigation on the left. Organization-wide settings and the license are located there as well, under Organization Management. Your personal profile is reached through your user icon in the top right corner via Account Settings.

The account menu in the top right corner

Tasks reserved for the global superuser, such as creating organizations, multi-tenancy and publishing permission sets, are described in System Administration.

Organization Settings (Admin Role)

To change the name of your organization, customize the Look & Feel of the platform or change the organization’s Password Policy, use the Edit Organization button. Other organization-wide settings are grouped on the same page, so navigate to > Administration > Organization Management > Settings.

Here you can also edit settings such as the device inactivity check intervals. BlueRange uses these intervals to mark devices as inactive and to send notification e-mails. See the Monitoring chapter for more information on how to apply notifications on devices.

Users, Groups & Permissions

BlueRange uses a flexible permission system built from users, groups, permission sets and optional partial permissions. Managing them is covered in its own chapter:

Permission System (how access control works)
Managing Users (create users and grant access)
Managing Groups (organize users into teams and nest groups)
Permission Sets (define what a role may do)
Partial Permissions (restrict access to specific buildings or devices)
External Users & Directory Sync (LDAP and Entra ID users)
System Administration (organizations, multi-tenancy, publishing permission sets)

Languages

Users can change the user interface language through their Account Settings (user icon in the top right corner, then the Settings card). We currently offer English and German.

Profile & User Settings

Click on your user icon in the top right corner and choose Account Settings to view your profile.

In the profile overview, you can:

Edit your profile
Change your password
Depending on your permissions, manage API Access keys

Create an API Access Token

This requires the Access Tokens permission (part of the Administrator role, among others).

You manage your API access tokens on your own profile. Open > "User Icon" > Account Settings, scroll to the Access Tokens section and click Create. Give the token a descriptive name so you can identify and revoke it later.

The token is shown only once. The dialog provides both the REST access token and ready-to-use MQTT connection details (client id, password, broker and an example topic). Copy and store them in a secure place immediately, as they cannot be displayed again. If you lose a token, delete it and create a new one.

The token and MQTT credentials are shown once

Create a separate token for each use-case (for example one for an automated tool and another for manual MQTT debugging), so you can revoke them individually once they are no longer needed.

Using these tokens is explained in detail in our development guide.