Mandates

This view allows you to give other clients (for example external service providers or subsidiaries) access to your groups and dashboards and use some of their alarm chains in your alarms. Using what are known as “Mandates”, you can create mutual access rights in both directions.

To configure mandates, click on Settings in the user menu at the top right and then go to the Mandates tab.

The page is divided into two columns. On the left side you can share certain user groups and alarm chains with other clients and in return get access to their real estates, groups and dashboards. The other client determines exactly which groups are shared.

On the right, you will see those clients who have shared their user groups and alarm chains with you and to whom you can grant access to selected real estates and groups.

Note

To create mandates between two clients, the client who wants to share access to their groups and dashboards with another client requires a “Mandate (connect company)” license. Please get in touch with your administrator or a sales representative to purchase this license.

You’ll find instructions on how to set up a mandate based on various use cases in the section Use cases below.

If you’re granting another client access to your groups and dashboards, you can use the exposed user groups from the other client to define which assets can be accessed by users from these respective user groups.

On the User Groups page, you can select the exposed user group from the other client (indicated by the icon with the little arrow), and you can grant access to individual groups on the Access to Groups card. By default, all dashboards in the selected groups will be shared with the external users, as well as any assets that are placed on these dashboards.

If you want to limit access to specific dashboards in the selected groups, you can assign dashboard categories on the card Access to Dashboard Categories. Only dashboards that have at least one of these categories assigned will be visible to users in that user group.

On the User Role card, you can define which user role the external users will have when accessing your client account.

Warning

If the selected user role has rights such as “Show all devices” or “Show documents”, note that users from the selected user group will have access to all of your devices and/or documents, respectively. Please make sure you assign a user role that only contains the minimum required action rights for those users.

If you want to give access to devices or data points that are not accessible on any of the shared dashboards, you can go to the respective device details page and assign the user group from the other client on the Device Access card.

Use cases

In the following sections, you will learn how to set up mandates using concrete case studies.

Use case 1: Service providers

You are a real estate manager and would like to grant an external technical or caretaker service access to selected real estates. You also want to link the alarm chains of this service provider with certain fault reports.

Ask the external service provider to provide you with their public key, which will be displayed to them in their own account on the Mandates page.
Enter this key in the Public Key field on the right and click on Create Mandate to link the service provider to your client account.
If the key is correct, a new card will appear on the page with the name of the external service provider. When you expand the card, all user groups and alarm chains shared by the service provider are displayed.
To give the service provider access to some of your real estates, switch to the user management area by clicking on Users in the user menu at the top right and then on the User Groups tab.
On the left, select one of the user groups provided by the external service provider. You can recognize these user groups by the small arrow symbol.
Assign access rights for your real estates and groups to this user group just as you would for your own user groups:

Access to Groups
Select the groups (portfolios, real estates, buildings, etc.) that users from the user group should be able to access.

Access to Dashboard Categories
If you select any dashboard categories here, the users from this user group will only be able to access dashboards with one of these dashboard categories assigned.

Access to Devices
Select the devices that the users from the user group should be able to access in device management. Note that this option only limits the visibility of devices in device management. The data points and data point filters of other devices will still be displayed to the users if they have been assigned to a group in the group tree or if they have been placed on a widget.
On the User Role card, select a user role. All users in the exposed user group will have the action rights from this assigned user role. Save the changes by clicking on Save at the top right.

Warning

If you don’t assign a user role or any groups to the user group, the users in the exposed user group won’t be able to access any groups or dashboards of this client. Make sure you always assign a user role and at least one group.
From now on, users in this user group can access the selected real estates and the dashboards and widgets they contain.
You can also use alarm chains from this service provider. The easiest way is to set them as subsequent alarm chains of your existing alarm chains. To do so, go to the Alarm Chains tab, select one of your own existing alarm chains on the left and then select an alarm chain from the service provider in the Subsequent Chain field. From now on, the alarm chain users of the external service provider will be notified as soon as your own alarm chain has been run through without acknowledgment.

Use case 2: Subsidiaries or external clients

You offer analysis and optimization services to your own clients, or you want to manage your subsidiaries or provide support for them, and therefore want to have access to all your clients from your own account.

Pass your Public Key that yout can find on the left side of your Mandates view to your subsidiary’s administrator and ask them to create a mandate by following the instructions from use case 1 above. If you have administrative access to the subsidiary client directly, you can create the mandate for them.
After this step has been completed, reload the page Mandates page on your own company. The other client is now displayed on a separate card on the left-hand side.
Expand this card. You can now expose alarm chains and user groups to that client, who in turn can define which of its real estates and groups are accessible to you when you log in as a user that is part of one of these user groups.

It is recommended to create a user group for each group of users that needs their own set of rights on the subsidiary or external client.

For example, create and assign a user group for users who need to perform administrative tasks on the other client (e.g. “Mandate Administrators”), or a user group for users who need to provide support for the other client (e.g. “Mandate Support”), etc.

Warning

While users can be part of multiple user groups in general, they can only be part of a single exposed user group.

Consider this when creating user groups and make sure that every user is only part of one exposed user group at most.
In the upper left corner you will now see a client selection which you can use to switch between your own client account and the account of your client.