User rights
User rights is where you control which device configuration settings the person using the device is allowed to change themselves.
Opening User rights
- Open the device configuration:
- Base configuration: Devices > Device management > Device configuration.
- OU or device: use its context-menu action Open the device configuration. See Actions for OUs or Actions for devices.
-
Go to Security > User rights.
-
Click Edit. For an OU or a device, turn off Use parent device configuration first.
-
Click an entry in the tree to switch it between allowed and locked.
- Click Apply (or Apply settings for a single device) to save.
The tree mirrors the sections of the device configuration dialog, for example Screen. Each entry shows one of three states:
| Icon | Meaning |
|---|---|
| Check mark | The device user is allowed to change this setting. |
| Cross | The setting is locked — the device user can see it but can’t change it. |
| Minus sign | Some entries below this one in the tree are locked, others are allowed. |
Search user right… filters the tree by name. The menu next to it offers Allow all features and Lock all features for the whole tree.
Modified user rights become active on the next device restart.
Note:
Administrators need the Security administrator permission to see this section, and Edit user rights to change it. These are administrator permissions, distinct from the device-user rights of the same names shown in the tree.
These entries are available in Scout Board. The legacy Scout Console offers only a single Manage monitors right, without the individual entries below it.
Screen rights
Under Screen, Resolution and Rotation sit next to Manage monitors, and Manage monitors expands into five entries of its own:
| Entry | Found under | What the device user can no longer change |
|---|---|---|
| Resolution | Screen | The resolution and refresh rate of each display. Locks the device’s Show all resolutions option with it. |
| Rotation | Screen | The orientation of each display. |
| Manage monitors | Screen | Everything the five entries below it lock, plus Resolution and Rotation. |
| Set as primary | Manage monitors | Which display is the primary display. |
| Delete monitor | Manage monitors | Switching a display off. |
| Duplicate monitor | Manage monitors | Switching between Extend displays and Mirror all displays. |
| Scaling factor | Manage monitors | The display scaling factor. |
| Extend monitor | Manage monitors | How displays line up with each other in an extended desktop (Vertical alignment on the device). |
These five individual entries, plus Resolution and Rotation, apply on devices running UniconOS 2609 or later. On earlier UniconOS versions, only Manage monitors has an effect, as a single on/off switch for all monitor settings, including arrangement.
Locking Manage monitors locks all five entries below it, and Scout Board then shows Resolution and Rotation as locked too. To lock only some monitor settings, leave Manage monitors allowed and lock individual entries instead. Locking all five entries below Manage monitors also locks Manage monitors itself, which locks Resolution and Rotation as well.
Note:
In a configuration label, locking Manage monitors does not lock Resolution and Rotation — unlike in the base configuration, an OU, or a device. Lock these two entries separately in a label if you need them locked too.
Allowing any of these entries also allows Manage monitors, Screen, and the top-level Device configuration entry.
On UniconOS 2609 and later, none of these entries locks how displays are arranged relative to each other on the desktop.
On the device, a setting locked by these entries stays visible but greyed out.
Keyboard and Mouse rights
Under Mouse/Keyboard, three entries control the virtual (on-screen) keyboard:
| Entry | Found under | What the device user can no longer do |
|---|---|---|
| Enable virtual keyboard | Mouse/Keyboard | Show the keyboard themselves. The Accessibility entry disappears from Quick System Access on the desktop, the logon screen and the lock screen, and the Show on screen keyboard switch disappears from the device configuration. |
| Virtual keyboard theme | Mouse/Keyboard | Change the keyboard’s theme on the device. |
| Virtual keyboard layout | Mouse/Keyboard | Change the keyboard’s layout on the device. |
These three entries apply on devices running UniconOS 2609 or later and are independent of each other; locking Mouse/Keyboard locks all three. As everywhere in this tree, allowing one of these entries also allows Mouse/Keyboard and the top-level Device configuration entry.
A device user can still close an open keyboard with its own close key even while Enable virtual keyboard is locked; the device then has no control to reopen it until the device restarts.
Caution:
On a device with no physical keyboard, if Enable virtual keyboard is locked and Start virtual keyboard automatically is off, device users have no way to bring up the keyboard, not even on the logon or lock screen. On such devices, leave Enable virtual keyboard unlocked.
See Keyboard and Mouse for the settings these rights control, and for the upgrade behavior when a configuration already locks Mouse/Keyboard.