Role-Based Access Control (RBAC)

Last Updated: April 07, 2026

Role-Based Access Control (RBAC) is a method of granting access to the Admin Console based on the user's role. Vasion Print comes with several predefined (Standard) roles and the option to create user-defined (Custom) roles for Administrator and Non-Administrator access. These roles define access and the ability to change settings and objects in the Admin Console.

Below is an overview of the available roles and the permissions they grant.

Print Roles Reference

Role

Apps

Description

Root Admin

Global

The main admin account receives this role when it is created during instance initialization. This user has full access to all the functionality that their tenant licensed but not necessarily access to all data. Vasion Automate and Vasion Print share one Root Admin or Admin account. Previously this role was called "Root" in PrinterLogic.

Administrator

Print

This role provides full management access to print management. This admin can add and remove other users and identities, configure all settings in the Admin Console, and reset passwords for others, including other admins. However this admin cannot reset the password for the Vasion Print Root Admin.

Site Manager

Print

This role provides full management access to the folders assigned to the manager. This manager does not have permission to change global settings that affect more than their scope. For example the ability to add or delete users and drivers.

Deploy Manager

Print

This role provides the ability to deploy, manage, and delete printers in the folders assigned to the manager.

Help Desk

Print

This role provides the ability to view print jobs in the queue and printers with errors.

Print Job Report Manager

Print

This role provides the ability to run print job auditing reports for printers in the folders assigned to the manager.

Administrative Auditor

Print

This role provides the ability to audit changes made in the Admin Console.

Custom

Print

You manually assign permissions for this role, depending on which operational tasks the role needs to perform.

You can use custom roles to grant access to specific folders, printers, and settings.

Note that if you navigate to Tools then Users and add user accounts and roles, those permissions only apply to the Vasion Print Admin Console and do not allow access to other Vasion Automate features and tabs.

Standard Non-Administrator Role Details

Below are additional details on the permissions assigned to standard Non-Administrator roles. You assign folders or other objects in the tree structure to these roles. Non-Administrator users can have different role assignments for different objects in the tree structure. For example, a user can be a Site Manager for one folder and a Deploy Manager for a different folder.

Site Manager

Users with the Site Manager role have permission to access the following:

Navigation Menus

  • Tools Menu
    • Release > Release Stations: Can add and delete stations, add printers, and link devices.
    • Badge Management: Can manage badge users.
  • Reports Menu
    • Workstations: Can generate workstation reports.
    • Print Job Records: Can generate and schedule print-job record reports.
    • Printer Status
      • Printers w/ Errors Only.
      • All Printers.
  • Account Menu (Username)
    • My Account.

Objects & Tabs

In assigned folders, these users can add, move, copy, and delete the following:

  • Printers.
  • Folders.
  • IP address ranges.
  • Service Clients.

These users can access the following tabs for each object:

Printer Objects & Tabs

Object

Tab

Action

Folder

General

Modify all options.

Portal Security

Modify all options.

Alerts

Modify all options.

Map

Modify all options.

Services

Modify all options.

Printer

General

Modify all options.

Port

Modify all options.

Drivers / Profiles

Modify profiles but cannot upload drivers or access the Drivers / Profiles repository.

Deploy

Modify all options.

Portal Security

Modify all options.

Alerts

Modify all options.

Printing

Modify all options.

Status

Modify all options, if Simple Network Management Protocol (SNMP) is enabled.

Printer Info

Modify all options, if SNMP is enabled.

Queue

Modify all options.

Release

Modify all options.

Apps

Modify all options.

Off-Network

Modify all options.

Shared Printer

General

Modify all options.

Deploy

Modify all options.

Portal Security

Modify all options.

Queue

Modify all options.

IP Address Range

General

Modify all options.

Deploy

Modify all options.

Service Client

General

Modify all options.

Email Printing

Modify all options.

Printer Apps

Modify all options.

SNMP

Modify all options.

Offline Printing

Modify all options.

Identity Sync

Modify all options.

External Gateway

Modify all options.

Vasion Output

Modify all options.

Deploy Manager

Users with the Deploy Manager role have permission to access the following:

Navigation Menus

  • Tools Menu
    • Release > Print Jobs.
    • PrinterLogic Portal (Self-service Portal).
  • Reports Menu
    • Printer Status.
      • Printers w/ Errors Only.
      • All Printers.
  • Account Menu (Username).
    • My Account.

Objects & Tabs

In assigned folders, these users can do the following:

  • Add, move, copy, and delete printers.
  • Add IP address ranges.

These users can access the following tabs for each object:

Printer Objects & Tabs

Object

Tab

Action

Folder

General

Modify all options.

Printer

General

Modify all options.

Port

Modify all options.

Drivers / Profiles

Modify profiles but cannot upload drivers or access the Drivers / Profiles repository.

Deploy

Modify all options.

Printing

Modify all options.

Status

Modify all options, if SNMP is enabled.

Printer Info

Modify all options, if SNMP is enabled.

Queue

Modify all options.

Release

Modify all options.

Apps

Modify all options.

Shared Printer

General

Modify all options.

Deploy

Modify all options.

Queue

Modify all options.

IP Address Range

General

View the tab details but cannot modify.

Deploy

Modify all options.

Help Desk

Users with the Help Desk role have permission to access the following:

Navigation Menus

  • Tools Menu
    • Release > Print Jobs.
    • PrinterLogic Portal (Self-service Portal).
  • Reports Menu
    • Workstations.

    • Printer Status.

      • Printers w/ Errors Only.
      • All Printers.
  • Account Menu (Username).
    • My Account.

Objects & Tabs

These users can access the following tabs for each object:

Printer Objects & Tabs

Object

Tab

Action

Printer

General

View the tab details but cannot modify.

Port

View the tab details but cannot modify.

Drivers / Profiles

Modify profiles but cannot upload drivers, access the Drivers / Profiles repository, or add or update profiles.

Deploy

View the tab details but cannot modify.

Printing

View the tab details but cannot modify.

Status

View the tab details but cannot modify, if SNMP is enabled.

Printer Info

View the tab details but cannot modify, if SNMP is enabled.

Queue

Modify all options.

Release

Modify all options.

Apps

View the tab details but cannot modify.

Shared Printer

General

View the tab details but cannot modify.

Deploy

View the tab details but cannot modify.

Queue

Modify all options.

IP Address Range

General

View the tab details but cannot modify.

Deploy

View the tab details but cannot modify.

Print Job Report Manager

Users with the Print Job Report Manager role have permission to access the following:

Navigation Menus

  • Tools Menu
    • PrinterLogic Portal (Self-service Portal).
  • Reports Menu
    • Print Job Records.
  • Account Menu (Username).
    • My Account.

Objects & Tabs

These users cannot access any printer objects.

Administrative Auditor

Users with the Administrative Auditor role have permission to access the following:

Navigation Menus

  • Tools Menu
    • PrinterLogic Portal (Self-service Portal).
  • Reports Menu
    • Administrative Audit Records.
  • Account Menu (Username).
    • My Account.

Objects & Tabs

These users cannot access any printer objects.