--- title: "Configure Lasernet Core Print Servers and User Access" slug: "configure-lasernet-core-print-servers-and-user-access" description: "Describes how to add print servers to Lasernet Config Server." updated: 2026-05-26T14:52:50Z published: 2026-05-26T14:52:50Z canonical: "kb.lasernetgroup.com/configure-lasernet-core-print-servers-and-user-access" --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.lasernetgroup.com/llms.txt > Use this file to discover all available pages before exploring further. # Configure Lasernet Core Print Servers and User Access **Applies to:** Lasernet Core 11 At this stage of the process, you configure access to printers in different locations, via cloud or on-premises print servers. For optimal performance, depending on print load and available cores, we recommend that multiple printer services are added to the same print server. This enables you to separate print server queues into batches for larger printer jobs and on-demand for production labels. The steps that you follow depend on whether you are using Manage or the Lasernet Config web app. > [!NOTE] > Note > > The Lasernet Config web app was provided with earlier versions of Lasernet Core. It is a legacy web app and will be deprecated in a future version of Lasernet Core. ## View a List of Print Servers ### Manage In the **System Configuration** menu (see 1 in the image below), click **Print Servers**. On the **Print Servers** page, each tile (2) represents a print server. Click **On Premises** and **Cloud** (3) to filter the list. Click **All** to display all print servers. ![The Print Servers page in Manage with two print servers displayed and a red rectangle indicating the filter buttons.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/print servers page.png) ### Lasernet Config Web App **Expand for information** In the Lasernet Config web app, click **Print Servers** in the **Tools** menu. The main area of the window lists all the configured print servers, organised into **Cloud** and **On-Premises** categories. ![The Print Servers page in the Lasernet Config web app.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-lnbam18y.png) ## ## Set Print Server Properties When you add or edit a print server, you must appropriately set its properties. The steps for this task depend on the tool that you are using. ### Manage You can set up on-premises or cloud print servers. To create a new print server, click **New Print Server**. ![A red rectangle indicates the New Print Server button.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server.png) To edit an existing print server, click its tile. #### On-Premises At the top of the **New Print Server** window, click **On-Premises**. ![The New Print Server window with the On-Premises button clicked.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server on premises.png) **General** **Name:** The name that will be displayed to identify the print server. **Description:** Custom description of the print server. **Client Secret:** A unique character string used by Lasernet Core environments to authenticate a session with the Printer Service. Click the **Regenerate Client Secret** (anticlockwise arrow) icon in the field to generate a random client secret. > [!NOTE] > Note > > Client Secret is used for both cloud and on-premises printing. > [!NOTE] > Note > > If the printer service is running and the client secret is regenerated, you must log out of the Printer Service application, log in again, and then redeploy your printers and printer profiles to update the client secret. **Connection** **Host name:** Enter the host name or IP address of the server that is running the Printer Service app. **Port:** The default port number is 443. The port number can be changed. To save the print server, click **Confirm**. #### Cloud At the top of the **New Print Server** window, click **Cloud**. ![The New Print Server window with the Cloud button clicked.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server cloud 1(1).png) **General** **Name:** The name that will be displayed to identify the print server. **Description:** Custom description of the print server. **Client Secret:** A unique character string used by Lasernet Core environments to authenticate a session with the Printer Service. Click the **Regenerate Client Secret** (anticlockwise arrow) icon in the field to generate a random client secret. > [!NOTE] > Note > > Client Secret is used for both cloud and on-premises printing. > [!NOTE] > Note > > If the printer service is running and the client secret is regenerated, you must log out of the Printer Service application, log in again, and then redeploy your printers and printer profiles to update the client secret. **Service Bus** Insert the endpoint and entity path for the service bus as defined in Microsoft Azure. **Connection String:** The Service Bus endpoint connection string. Use the connection string that you noted when following the instructions in the [Azure Service Bus section of Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#azure-service-bus). **Entity Path:** The name of the Service Bus queue that will be used. Use the name that you noted when following the instructions in the [Azure Service Bus section of Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#azure-service-bus). > [!NOTE] > Note > > Separate printer servers should have individual Service Bus queues and entity paths; they should not share. **Storage** The instructions for configuring authentication with the Azure Storage account depend on the authentication type (access key, app-registration-based, or Shared Access Signature (SAS) token) that Lasernet Core will use to access the storage. Refer to the relevant following section. **Connection String (Access Key)** If Lasernet Core will use access key authentication, click **Connection String**, then use the storage account container name and connection string (as defined in Microsoft Azure) that you collected when following the instructions in the [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id) and [Access Keys](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#access-keys) sections of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). ![Connection string properties for Azure Storage.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server cloud connection string.png) **Connection String:** The storage account connection string. Use the connection string that you noted in [Access Keys](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#access-keys). **Container Name:** A unique name to identify the container. Use the name that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **App Registration** If Lasernet Core will use app-registration-based authentication, click **App Registration**, then use the app registration details and container name (as defined in Microsoft Azure) that you collected when following the instructions in the [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id) and [Application Registration](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#application-registration) sections of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). ![Connection string properties for app registration.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server cloud app registration.png) **Endpoint Suffix:** Select the Microsoft cloud that hosts the storage account. Microsoft maintains separate clouds for data residency and regulatory compliance reasons. **Storage Account:** Use the storage account name that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Tenant ID:** Use the tenant domain that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Client ID:** Use the **Application (client) ID** (from the Azure Portal) of the app registration that Lasernet Core will authenticate as. See [Application Registration](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#application-registration). **Client Secret:** Use a client secret (from the Azure Portal) for the app registration that Lasernet Core will authenticate as. See [Application Registration](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#application-registration). **Note:** This is not the same client secret that you entered on the **General** tab. **Container Name:** Use the name that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Shared Access Signature (SAS) Token** If Lasernet Core will use a Shared Access Signature (SAS) to access Azure Storage, click **SAS Token**. ![Connection string properties for SAS Token.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server cloud SAS.png) The **Overridable** checkbox determines whether the Printer Service Output module can read **Endpoint Suffix**, **Storage Account**, **Container Name**, or **SAS Token** from JobInfos when Lasernet Core sends jobs to the Printer Service app. The relevant JobInfos are: - PrinterServiceAzureStorageAccountName - PrinterServiceAzureStorageContainerName - PrinterServiceAzureStorageSASToken - PrinterServiceAzureStorageEndpointSuffix If the PrinterServiceAzureStorageEndpointSuffix JobInfo exists, it must contain one of the following values: - core.windows.net - core.chinacloudapi.cn - core.usgovcloudapi.net If **Overridable** is selected, and one or more of the JobInfos listed above exist when Lasernet Core processes a job, the values provided by the JobInfos that are present will override the values present in this **New Print Server** window. If **Overridable** is selected, **Endpoint Suffix**, **Storage Account**, **Container Name**, and **SAS Token** can each either be left as their default value or given values, depending on the behavior that you want to implement. This is because these settings are individually overridable. For example, you can enter values in the **New Print Server** window for **Storage Account** and **Container Name**, leave **SAS Token** blank, and then ensure that Lasernet Core jobs contain the PrinterServiceAzureStorageSASToken and PrinterServiceAzureStorageEndpointSuffix JobInfos. If **Overridable** is cleared, you must provide values in this **New Print Server** window for **Storage account**, **Container name**, and **SAS Token.** **Overridable:** See the information above**.** **Endpoint Suffix:** Select the Microsoft cloud that hosts the storage account. Microsoft maintains separate clouds for data residency and regulatory compliance reasons. **Storage Account:** Use the storage account name that you noted in the [Additionally For Shared Access Signature (SAS) Authentication Only](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#additionally-for-shared-access-signature-sas-authentication-only) section of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). **SAS Token:** This is the SAS token supplied to you by the Microsoft Azure administrator. See the [Shared Access Signature (SAS)](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#shared-access-signature-sas) section of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). **Container Name:** Use the name that you noted in the [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id) section of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). **Connection** You must specify the host name or IP address of the print server that is running the Printer Service app. ![The Connection configuration for a cloud print server.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/new print server cloud connection.png) **Hostname:** Enter the host name or IP address of the server that is running the Printer Service app. **Port:** The default port number is 443. The port number can be changed. To save the print server, click **Confirm**. ### Lasernet Config Web App **Expand for information** The **Add Print Server** or **Print Server Properties** window is displayed when you add or edit a print server. In the Lasernet Config web app, click **Print Servers** in the **Tools** menu, then: - To add a print server, click **Cloud** or **On-Premises**, then click **Add** in the toolbar. - To modify the settings for an existing print server, double-click it, or click it and then click **Edit** in the toolbar. - To delete a print server, click it and then click **Remove**. ### ### General Properties #### **Cloud** ![The General tab for Cloud print servers.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-1vz4aj1v.png) #### **On-Premises ![The General tab for on-premises print servers.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-g148151g.png)** **Name:** The name that will be displayed to identify the print server. **Description:** Custom description of the print server. **Client Secret:** A unique character string used by Lasernet Core environments to authenticate a session with the Printer Service. Click the ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-wnfqqynn.png) (two arrows) icon in the field to generate a random client secret. > [!NOTE] > Note > > Client Secret is used for both cloud and on-premises printing. > [!NOTE] > Note > > If the printer service is running and the client secret is regenerated, you must log out of the Printer Service application, log in again, and then redeploy your printers and printer profiles to update the client secret. ### ### Cloud Print Server Properties The following sections are relevant only for Cloud print servers. #### Cloud — Service Bus Insert the endpoint and entity path for the service bus as defined in Microsoft Azure. ![The Service Bus tab for Cloud print servers.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-f6vwna7t.png) **Connection String:** The Service Bus endpoint connection string. Use the connection string that you noted when following the instructions in the [Azure Service Bus section of Configure Microsoft Azure](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#azure-service-bus). **Entity Path:** The name of the Service Bus queue that will be used. Use the name that you noted when following the instructions in the [Azure Service Bus section of Configure Microsoft Azure](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#azure-service-bus). > [!NOTE] > Note > > Separate printer servers should have individual Service Bus queues and entity paths; they should not share. #### Cloud — Storage The instructions for configuring authentication with the Azure Storage account depend on the authentication type (access key, app-registration-based, or Shared Access Signature (SAS) token) that Lasernet Core will use to access the storage. Refer to the relevant following section. **Connection String (Access Key)** If Lasernet Core will use access key authentication, click **Connection String**, then use the storage account container name and connection string (as defined in Microsoft Azure) that you collected when following the instructions in the [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id) and [Access Keys](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#access-keys) sections of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). ![The Storage tab for Cloud print servers with Connection String selected.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-fmtaphu2.png) **Connection string:** The storage account connection string. Use the connection string that you noted in [Access Keys](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#access-keys). **Container name:** A unique name to identify the container. Use the name that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Application Registration** If Lasernet Core will use app-registration-based authentication, click **Application Registration**, then use the app registration details and container name (as defined in Microsoft Azure) that you collected when following the instructions in the [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id) and [Application Registration](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#application-registration) sections of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). ![The Storage tab for Cloud print servers with Application Registration selected.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/print server cloud storage tab app reg.png) **Endpoint suffix:** Select the Microsoft cloud that hosts the storage account. Microsoft maintains separate clouds for data residency and regulatory compliance reasons. **Storage account:** Use the storage account name that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Tenant ID:** Use the tenant domain that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Client ID:** Use the **Application (client) ID** (from the Azure Portal) of the app registration that Lasernet Core will authenticate as. See [Application Registration](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#application-registration). **Client Secret:** Use a client secret (from the Azure Portal) for the app registration that Lasernet Core will authenticate as. See [Application Registration](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#application-registration). **Note****:** This is not the same client secret that you entered on the **General** tab. **Container name:** Use the name that you noted in [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id). **Shared Access Signature (SAS) Token** If Lasernet Core will use a Shared Access Signature (SAS) to access Azure Storage, click **Shared Access Signature Token (SAS)**. The **Overridable** checkbox determines whether the Printer Service Output module can read **Endpoint suffix**, **Storage account**, **Container name**, or **SAS Token** from JobInfos when Lasernet Core sends jobs to the Printer Service app. The relevant JobInfos are: - PrinterServiceAzureStorageAccountName - PrinterServiceAzureStorageContainerName - PrinterServiceAzureStorageSASToken - PrinterServiceAzureStorageEndpointSuffix If the PrinterServiceAzureStorageEndpointSuffix JobInfo exists, it must contain one of the following values: - core.windows.net - core.chinacloudapi.cn - core.usgovcloudapi.net If **Overridable** is selected, and one or more of the JobInfos listed above exist when Lasernet Core processes a job, the values provided by the JobInfos that are present will override the values present in this **Add Print Server** window. If **Overridable** is selected, **Endpoint suffix**, **Storage account**, **Container name**, and **SAS Token** can each either be left as their default value or given values, depending on the behavior that you want to implement. This is because these settings are individually overridable. For example, you can enter values in the **Add Print Server** window for **Storage account** and **Container name**, leave **SAS Token** blank, and then ensure that Lasernet Core jobs contain the PrinterServiceAzureStorageSASToken and PrinterServiceAzureStorageEndpointSuffix JobInfos. If **Overridable** is cleared, you must provide values in this **Add Print Server** window for **Storage account**, **Container name**, and **SAS Token.** ![The Storage tab for Cloud print servers with Shared Access Signature Token selected.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/print server cloud storage tab SAS.png) **Overridable:** See the information above**.** **Endpoint suffix:** Select the Microsoft cloud that hosts the storage account. Microsoft maintains separate clouds for data residency and regulatory compliance reasons. **Storage account:** Use the storage account name that you noted in the [Additionally For Shared Access Signature (SAS) Authentication Only](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#additionally-for-shared-access-signature-sas-authentication-only) section of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). **SAS Token:** This is the SAS token supplied to you by the Microsoft Azure administrator. See the [Shared Access Signature (SAS)](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#shared-access-signature-sas) section of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). **Container name:** Use the name that you noted in the [Container Name, Storage Account Name, and Tenant ID](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing#container-name-storage-account-name-and-tenant-id) section of [Configure Microsoft Azure for Lasernet Core Cloud Printing](/v1/docs/configure-microsoft-azure-for-lasernet-core-cloud-printing). #### Cloud — Connection You must specify the host name or IP address of the printer server that is running the Printer Service app. ![The Connection tab for Cloud print servers.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-xh1c0qgw.png) **Host name:** Enter the host name or IP address of the server that is running the Printer Service app. **Port:** The default port number is 443. The port number can be changed. ### ### On-Premises Print Server Properties The following section is relevant only for on-premises print servers. #### On-Premises — Connection For on-premises print servers, you must specify the host name of the printer server on the network that is running the Printer Service app. ![The Connection tab for on-premises print servers.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-x14uenyg.png) **Host name:** Enter the host name of the server that is running the Printer Service app. The Lasernet Core environment that is running the Printer Service module must be able to access this print server via a TCP/IP connection. **Port:** The default port number is 443. The port number can be changed. ## Users and Groups Optionally, create users and groups to represent the users who will log into Lasernet Core. Groups are added to printer service security roles ([see next section](/v1/docs/configure-lasernet-core-print-servers-and-user-access#security-roles)) to grant the members of those groups access to specific print servers. If you do not create users and groups, you must use the built-in admin user. For more information about users and groups, see [Configure Users, Groups, and Security Roles](/v1/docs/configure-users-and-roles). ### Manage ![The User Management area in Manage.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/all users page.png) ### Lasernet Config Web App ![The Users and Groups page of the Lasernet Config web app.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-hlvazwxo.png) ## Security Roles Security roles enable you to define the Lasernet Core capabilities that are available to the members of the groups that are assigned that role. For the Lasernet Printer Service, the security roles in the **Printer Service** category specify which print servers the members of the group can access. Doing this gives members of those groups access to specific printers and print profiles. The built-in **All Rights** security group provides access to all print servers. For instructions on how to assign users to an appropriate printer service role, follow the steps for the tool you are using. ### Manage 1. In the **User Management** menu, click **Security Ro****les**. ![The Security Roles menu item in the User Management menu.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/security roles menu item(1).png) 2. Click the **Printer Service** tab. 3. Click the tile for the security role that you want to add deployment permissions and groups to (see 1 in the image below). The properties pane for the security role opens. Or, to create and configure a new role, click **New Role** to create a role, then click the tile for the new security role. ![A number annotated screenshot of the properties pane for a printer service role showing the position of two important properties.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/printer service security role properties.png) 4. In the **Deployment** area, select print servers from the **Print Server Access** list (2) to specify which print servers the members of this group have access to. > [!NOTE] > Note > > You cannot modify this setting for the **All Rights** security role 5. In the **Members** area, select users groups from the **Security Role Members** list (3) to specify which groups (and consequently, which users) have access to the selected print servers. > [!NOTE] > Note > > If a user is a member of several groups, their access rights are a combination of all groups. 6. Click **Confirm**. ### Lasernet Config Web App **Expand for information** In the Lasernet Config web app, click **Security Roles** in the **Tools** menu. The main area of the window lists Lasernet Core applications and their associated security roles. This list includes a **Printer Service** category. ![The Security Roles page of the Lasernet Config web app.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-r9mr0a2p.png) In the toolbar: - Click **Add** to configure and add a new security role to the selected category. - Click **Edit** to modify the selected security role. Alternatively, double-click it. - Click **Remove** to delete the selected security role. For more information about security roles, see [Configure Users, Groups, and Security Roles](/v1/docs/configure-users-and-roles). The following section (*Configure Printer Service Security Roles*) describes how to configure **Printer Service** security roles. ### Configure Printer Service Security Roles In summary, you add groups to the **Members** tab of a security role in the **Printer Service** category, and use the **Deployment** tab to select which print servers the members of those groups have access to. The built-in **All Rights** security group provides access to all print servers. On the **Security Roles** page of the Lasernet Config web app: - To create a printer service security role, click **Printer Service** in the main area of the page, and then click **Add** in the toolbar. - To modify an existing security role, click it and then click **Edit** in the toolbar. The **PrinterService Role Properties** window opens. You can assign groups access to specific print servers. Doing this gives members of those groups access to specific printers and print profiles. **Deployment Tab** ![The Deployment tab for a Printer Service role.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-kl3hwqia.png) For each print server, select **Allow** to enable that print server’s printers to be accessed through the Printer Service. You cannot modify these settings for the **All Rights** security role **Members Tab** ![The Members tab for a Printer Service role.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/configure-lasernet-generate-print-servers-image-vzkw4us8.png) Click **Add** to select user groups and add them to the security role. To revoke a user group’s access rights, select it and then click **Remove**. > [!NOTE] > Note > > If a user is a member of several groups, their access rights are a summary of all groups. ## Next Steps The next part of the process is to [install the Printer Service application](/v1/docs/install-the-printer-service-application).