Defining access rights
About
| In order for users to be able to use devices to print or perform other operations, you must assign roles to users, with access rights set for such operations.
| At a Glance
|
Access rights restriction for device native applications (e.g. Copy) on YSoft SafeQ Embedded Terminal for Xerox, requires following settings:
Set enableXeroxAccessDefinition property to enable in Y Soft SafeQ System settings
Set authentication mode to To device in device terminal settings. For more info see Installing YSoft SafeQ Embedded Terminal for Xerox EIP
Color restriction is not supported at all, for native applications on Xerox machines.
General Overview
To set access rules, in the Web interface, go to Rules > Access definition.

The access definition list includes the following columns:
role - role name
device group - device group name
Device - device name
Three columns on the right show the access settings:
print – access to printing. If ENABLED, the user can print.
copy – access to copying. If ENABLED, the user can make copies.
color -- access to color. If ENABLED, the user can perform COLOR
print/copy jobs.
Access settings are described as follows:
Option | Description |
| Enable - Access right is enabled. |
| Disable - Access right is disabled. |
| Save changes for the current role. |
| Delete the role from the list. |
| Revert to unsaved changes made for this entry. |
| All users may print/copy color jobs. |
| All users may copy. |
| All users may print. |
| Save all changes. |
| Revert to all unsaved settings. |
Add new access record
To add a new access record, click the
button.

The following rules apply to access settings:
Restriction always has priority over permission.
Settings for the role everyone are used only if settings for another role does not exist.
Settings for a specific device have priority over settings for the entire device group.
Option | Description |
User role | Defined user roles. To set up access rights for all users, select everyone. |
Device group | Device group (ORS) to set up access to. To enable the selected role to access all devices, select ALL DEVICES GROUP. |
Device | Device to set up access to. To enable the selected role to access all the devices in the group, select ALL DEVICES IN GROUP. |
| Rights settings for the currently selected role. |
| Click Add to save the access rights record. |
Access Definition Filter
Use these filters to further restrict access:
Restrict to specific user role
Restrict to a specific device group
Restrict to a specific device
Additional filter options
Icon | Action | Description |
| Apply filter | Apply the selected filter to the access definition. |
| Cancel filter | Cancel the selected filter. |
| Show filter | Show filter options. |
| Hide filter | Hide filter options. |
Actions
To update data on ORS servers or to set access rights display options, click
. The following menu opens:
Update data on ORS - Select this option to upload changes to ORS servers: Update Data on ORS
Access right view behavior settings - Select this option to open access rights display options.
Access rights display settings

First option: Check this if you do not want YSoft SafeQ to display notifications when you save access rights changes. You may want to use this option if you add or edit a large number of access rights. (If there is an error, messages appear anyway.)
Second option: Check this; if you want YSoft SafeQ to automatically save newly added access rights. If you select this, you will not need to click the Save icon next to each access rights definition.
Third option - Check this if you do not want YSoft SafeQ to display pop-up dialogs that require confirmation for deleting particular access rights.















