User Groups in Rayven provide a secure and scalable way to manage permissions and access across users. By configuring user groups, you define exactly what users can see, do, and interact with — from interfaces and data to workflows and reports.
User Groups in Rayven provide a secure and scalable method to control what users can see and interact with. Whether you're segmenting access by region, customer, department, or device, user groups help enforce consistent permissions and data filtering.
Overview
User groups define shared access rules for:
-
Dashboards and interfaces
-
Reports and forms
-
Device and data filters
-
Workflow interaction permissions
This makes them essential for enforcing role-based access control (RBAC) across teams, departments, and clients.
How to Add a New User Group
-
Navigate to User Groups from the main menu.
-
Click Add New.
Fill in the following fields:
| Field | Description |
|---|---|
| User Group Name* | A clear, descriptive name for the group (required) |
| Description | Optional summary of the group’s purpose or scope |
| Filter By | Add label-based filters to restrict data visibility |
| Time Zone | Set the default time zone for widgets and timestamps |
| Group Type | Choose between: |
| - Shared Group: Basic shared access | |
| - Shared Device Filters: Uses filters to segment access |
Click Save to create the group.
How to Edit an Existing User Group
-
Navigate to the User Groups list.
-
Click on the group name you want to edit.
-
Modify any of the following fields:
Group Details
| Field | Description |
|---|---|
| User Group Name* | Rename the group if necessary |
| Description | Update or add contextual notes |
| Filter By | Add or modify label-based filters |
| Label Settings | Manage available label keys and segmentation rules |
| Time Zone | Change the default time zone for interface data |
| Group Type | Switch between Shared Group and Shared Device Filters |
Click Save to apply updates.
Filtering Data by Labels
Label-based filters limit what users can access. This ensures each user group only sees relevant data based on their role, department, customer, or location.
What Are Labels?
Labels are key-value tags applied to devices, workflows, and data.
Examples:
-
Customer = Rayven -
Region = NSW -
Team = Maintenance
These tags enable dynamic filtering without needing to create unique workflows for every scenario.
How to Set Up Filters
In the Filter By field of the user group:
-
Add filters in the format
LabelKey = Value -
You can stack multiple filters — they use AND logic
Example:
Customer = Rayven
Region = NSW
Users in this group will only see data tagged with both conditions.
Filtering Use Cases
| Use Case | Filter Example | Outcome |
|---|---|---|
| Customer-Specific Views | Customer = Rayven |
Limits access to data from Rayven's tenants only |
| Region-Based Access | Region = North |
Dashboards only show devices tagged for the North region |
| Department-Specific Access | Team = Maintenance |
Only maintenance-related data and interfaces are visible |
| Client Portal Segmentation | ClientID = 3249 |
Ensures one client doesn’t access another’s data |
🧠 Tip: Labels are reusable across devices, interfaces, and workflows for consistent control.
Assigning Users to a Group
-
Open the user group.
-
Use the Add a new user dropdown to select users.
-
To remove users:
-
Click the Remove icon next to their name
-
Use Remove All to clear the group
-
Assigning Interface and Report Access
You can assign what group members can see and do across the platform.
| Section | Description |
|---|---|
| Select Interfaces | Choose which dashboards and pages are visible to the group |
| Select Forms | Grant access to specific forms |
| Select Reports | Assign full reports for viewing or interaction |
| Select Report Templates | Give access to dynamic or branded templates |
| Messages | Review group-specific alerts or notices (if configured) |
Interface assignments will show live counts (e.g., “7 Interfaces Selected”).
Save Changes
Once done editing:
-
Click Save
-
Changes are applied immediately to all members of the group
Q&A
Q: What’s the difference between a Shared Group and Shared Device Filters?
-
Shared Group: All members share the same unfiltered access
-
Shared Device Filters: Group access is restricted using label-based data filters
Q: Can a user belong to multiple user groups?
A: Yes. This allows users to inherit combined access across multiple roles or departments.
Q: How do filters affect what users see?
A: Filters restrict access to only those devices, data, and workflows that match the defined label conditions.
Q: Can filters use OR logic (e.g., Region = East OR West)?
A: No, Rayven’s filters use AND logic. All conditions must match for the data to be visible to the user group.
Q: How do I manage labels centrally?
A: Labels are managed in the Label Settings section and can be applied consistently across devices, data streams, workflows, and interfaces.
Q: Can I preview what a user in a group would see?
A: Yes. You can impersonate users or test group permissions by logging in as a user or using test dashboards filtered by labels.
Q: What happens if I remove a label used in a filter?
A: Users in the group may lose access to filtered data unless the filters are updated. Always audit label usage before deletion.
Q: Can I bulk assign interfaces to a group?
A: Yes. Use the multi-select checkboxes during the "Select Interfaces" step, or contact support for API-based bulk updates.
Q: How do I handle cross-department workflows with shared access?
A: Create overlapping user groups (e.g., “Ops + Maintenance Shared”) and assign only the needed interfaces or workflows to each.