Users & Roles (RBAC)
Fine-grained access control for every operator and team in your organization
OrcaMonitor's role-based access control system lets you define exactly what each user, team, or service account can see and do — down to the module, action, and device-group level — with no over-permissioning required.
In large operations teams, not every operator needs access to every system. RBAC in OrcaMonitor is fully scoped: you can restrict a junior NOC analyst to read-only alert views on specific device groups, while a senior engineer has full automation and AI approval rights across the estate.
Features
How OrcaMonitor implements users & roles (rbac)
Role Definitions
Create named roles with explicit permission sets. Built-in roles include Read-Only Analyst, NOC Operator, Senior Engineer, Automation Manager, and Governance Auditor.
Permission Granularity
Permissions are defined at the module-action level: e.g., Tickets:View, Tickets:Assign, Automation:Execute, AI:Approve. No coarse all-or-nothing access.
Device Group Scoping
Restrict any role to specific device groups or sites. An operator scoped to 'Site-A' cannot view or act on devices in 'Site-B'.
User Lifecycle Management
Create, deactivate, and audit user accounts. Deactivated accounts immediately lose all access and are flagged in the audit log.
SSO Integration
Optionally integrate with Azure Entra ID (formerly Azure AD) for federated authentication. Local accounts remain functional for air-gapped deployments.
Service Accounts
Create API service accounts with scoped tokens for automation, integration, and monitoring systems that need programmatic access.
Capabilities
- Unlimited custom role definitions
- Permission inheritance via role hierarchies
- Last-login and session audit per user
- Password policy enforcement (complexity, expiry, MFA)
- Azure Entra SSO with group-to-role mapping
- API token scoping per service account
Compliance Framework Alignment
These lines map OrcaMonitor features to the controls they help you evidence. They are not certifications of OrcaMonitor or Synetal Solutions — compliance is a conclusion your own auditor reaches about your organisation and scope.
Related Governance Topics
See every module, pricing tier, and deployment option on the OrcaMonitor overview.