Skip to content

Cloud Security

Source PDF page(s): 12–15 (of raw/specs/MMS features v2.5.pdf) User Guide section: §5 (of raw/specs/MMS_UserGuide_v2.5.0.0.docx)

Summary: Reusable role-based permission templates (e.g. manager, operator) that define allowed cloud actions and manageable devices, assignable to users with optional per-user restrictions.

Owner: Martin (project lead — confirm feature owner)

Status: shipped

Why

Configuring permissions per user does not scale. Reusable templates give consistent, role-based access control across a company or group. See MMS Features v2.5 §3.

What

Cloud Security Template (p.12) — Completed

  • Create role-based permission templates at company or group level.
  • Define allowed actions across cloud modules and system functions.
  • Restrict or grant access to specific devices within the assigned scope.
  • Simplify onboarding and permission management through reusable templates.

Assign Cloud Security – Restrict Access (p.14) — Completed

  • Assign security templates to users within a selected company.
  • Apply predefined role-based permissions across cloud modules and device management.
  • Support bulk user assignment.
  • Apply optional per-user restrictions on top of the template:
  • Limit specific actions or modules.
  • Restrict access to certain Merchant Locations.
  • Restrict access to specific Linked Merchant Groups.
  • Automatically enforce template permissions (with restrictions) when users log in.

Steps

5.1 Create a Cloud Security Template

  1. View the list of existing templates.
  2. Click Create Security Template.
  3. Enter template information (Template Name, setup permissions).
  4. Define allowed actions:
  5. Access to specific cloud modules.
  6. Permissions for system functions.
  7. Click Save.
  8. Select an existing template to view or update details.

5.2 Assign Cloud Security — Restrict Access

  1. Select a Company — the system loads all Security Templates defined for that company.
  2. Choose the Security Template to apply.
  3. Select one or more Users of the company.

    Users must be previously set up in Company → Company User (see stakeholders-company).

  4. Optionally restrict permissions for the selected users:
  5. Limit specific actions or modules.
  6. Restrict access to certain Merchant Locations.
  7. Restrict access to specific Linked Merchant Groups (see device-manager-linked-merchants).
  8. Click Assign.
  9. Confirm the assignment.
  10. Upon next login, the users inherit template permissions with any applied restrictions.

Out of scope

Authentication itself (login/OTP) — see login-user-authentication.

Acceptance criteria

  • [x] Create role-based permission templates at company/group level.
  • [x] Define cloud-module actions and device-scope restrictions.
  • [x] Assign templates to users, including in bulk, with optional per-user restriction overrides.
  • [x] Permissions (with restrictions) auto-enforced on login.

Linked pages

Screenshots

Security Template list

Create Security Template

Module permissions setup

Template permissions detail

Assign Cloud Security — select company

Select template and users

Restrict permissions options

Assignment confirmation

Status history

  • 2026-05-27 — ingested from features doc v2.5 (Template + Assign both "Completed") → shipped
  • 2026-06-03 — step-by-step flows and Restrict Access details (Merchant Locations, Linked Merchant Groups) added from raw/specs/MMS_UserGuide_v2.5.0.0.docx §5