Summary

To restrict user access to specific assets, you need to set up Tags/Labels, then assign Assets and people to those Tags. We will walk through those steps in this article.

Overview of Tags

Tags give you the ability to restrict user access to specific assets or dashboards. For example, an equipment rental company can create parent assets for each of their clients, and then create tags for each parent asset. The equipment rental company could then add all client end users to the tag so that the users can only see the parent asset, all of the child assets within it, dashboards, and IO that are associated with their company.

Create Tags

  • To access and edit tags, navigate to the “Settings'' section of the Samsara dashboard by going to the bottom left and clicking on the Gear icon, then "Org Settings" then "Tags"

9.jpg

  • Select the “+ Create a Tag” button, name the tag, and select the options you want to give access to. We recommend creating tags for assets and/or dashboards.

  • A tag for a parent asset will also give users access to all of the child assets within it.

AA.jpg

Add Users to Tags

Adding users to the tag will restrict their views to only the assets or dashboards specified in the tag. If a user has a custom role and is added to a tag, they may have some limitations.

AB.jpg
AC.jpg

  • Dashboards: A tag user cannot create dashboards in the global dashboard tab. They can create dashboards under any asset that’s part of the tag. They can also view any dashboard associated with the tag.

  • I/O: A tag user can create I/O in the global I/O tab if they select the gateway or third party device that’s associated with the tag.

  • Reports: A tag user will be able to see only reports that contain data that the user has access to. If there is data in a report that a user does not have access to, that report will not be available to view or edit.

  • Alerts: A tag user will be able to view any alert that contains data inputs from an asset they are tagged to. If the alert contains data inputs they have access to and data inputs they do not have access to, the user will only be able to see the data input info they have access to. They will not be able to edit the alert or view the full configured alert. A tag user will only be able to see and select alert contacts that have the same tag.

  • Assets: A tag user for specific assets cannot create net new parent assets. They can create child assets that live under the parent asset they are tagged to.