Skip to content

Site Assignments

Site Assignments control which sites non-admin operators can see and manage. Use this page after creating users or after directory group mappings change access.

Borealis User Site Assignment page
User site assignment controls which sites non-admin operators can see and manage.

Assign Sites To Operators

  1. Open Access Management > Users.
  2. Select one or more non-admin operators.
  3. Open site assignment.
  4. Check sites those operators should access.
  5. Save assignment.

Admins inherit all sites and do not need assignment rows.

What Site Assignment Controls

  • Device list visibility.
  • Device approvals.
  • Device details and remote actions.
  • Filters, watchdogs, and scheduled jobs.
  • Header device search.
  • Site-scoped onboarding and automation.

Directory-Backed Users

Directory Services can map directory groups to site sets. Those mappings replace manual site assignment for cached non-admin directory users when they sign in or sync.

Warning

Operator with no assigned sites sees no devices. If user reports empty inventory, check role first, then site assignment.

Detailed Codex Breakdown

API endpoints

  • POST /api/user_site_assignments/selection - load current assignments for selected operators.
  • POST /api/user_site_assignments/assign - replace selected operators' assignments.
  • POST /api/directory/providers/<provider_id>/sync - refresh cached directory users and assignments.

Source map

  • User API: Data/Engine/Containers/api-backend/data/services/API/access_management/users.py
  • User site access manager: Data/Engine/Containers/api-backend/data/services/auth/
  • Site assignment UI: Data/Engine/Containers/webui-frontend/data/web-interface/src/Sites/Site_Assignment.jsx

Runtime behavior

  • user_site_assignments stores explicit site access rows.
  • Admin role bypasses site rows and sees all sites.
  • Directory provider site mappings can rewrite assignment rows for directory users based on group membership.