--- title: "Manage Security Roles" slug: "manage-security-roles-10" description: "Describes how to manage security roles for Lasernet Developer, Lasernet Monitor, Lasernet Client, and Printer Service in Lasernet Config Server." updated: 2026-10-23T13:04:32Z published: 2026-10-23T13:04:32Z canonical: "kb.lasernetgroup.com/manage-security-roles-10" --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.lasernetgroup.com/llms.txt > Use this file to discover all available pages before exploring further. # Manage Security Roles **Applies to:** Lasernet Core 10 Select the Security Roles tab to manage access control to Lasernet products and services. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-01.png) ## Developer The **Developer** section of the **Security Roles** feature controls user rights in Lasernet Developer and on the Lasernet Config Server website. To add a new developer role, click **Security Roles**, then in the main part of the page click the **Developer** section, then click **Add**. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-02.png) On the page displayed, enter a name and then click **OK**. Once you are done, a new developer role appears in the list. To remove a role, click that role and then click **Remove**. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-03.png) To edit the role, click that role and then **Edit**. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-04.png) In the Developer Role Properties window, use the Security and Deployment tabs to configure the selected role’s rights to access various administrative tools in the Lasernet Config Server and configuration tools in the Lasernet Developer. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-05.png) ### Security -> Administrative rights To manage access rights for the Lasernet Config Server: - Activate **Configuration** to allow a user to view configuration settings, history and revisions. - Acitvate **Servers** to allow a user to manage server settings. - Activate **Users** and groups to allow a user to add, edit and delete users and groups. - Activate **Security roles** to allow members of a group to manage the security roles for Administrative rights, Developer views, Deployments to specific server instances. - Deactivate all administrative rights to prevent a user from logging in to the Lasernet Config Server. ### Security -> Developer views To manage access rights for the Lasernet Developer: - Activate **Server** to allow a user to add, edit and delete server settings. - Activate **Modules** to allow a user to add, edit and delete module settings. - Activate **Forms** to allow a user to access the Lasernet Form Editor, SubForms, Phrases, Printer Profiles, Regional Profiles and Barcode Profiles. - Activate **Scripts** to allow a user to add, edit and delete JavaScripts. - Activate **Command** to allow a user to add, edit and delete Connections and Command. - Activate **Modifiers** to allow a user to add, edit and delete Modifiers. ### Deployment Rights On the Deployment tab, you can grant configuration deployment rights for each server instance. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-06.png) ### Members On the Members tab, you can specify which groups are **Members** of the selected security role. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-07.png) Local Lasernet Core groups and AD groups can be added as members of a security role. ### Allow a User to Download Grab Files When Using the Lasernet Developer Permission to download grab files when using Lasernet Developer is not granted by any of the Developer role permissions described above. To allow a user to download grab files when using the Lasernet Developer, you must ensure that the user’s group is a member of the **Monitor -> All rights** role. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-08.png) When you configure the **Monitor -> All rights** role, include the group that contains the user that you want to grant the access to. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-09.png) Users that have not been granted this access will be shown an “Access not allowed” error message when activating import grabs functionality from the Lasernet Developer. ### Example of Security Roles for a User Logged in to the Lasernet Config Server This section describes an example security configuration for a role, then shows the effect of that security configuration on the Lasernet Config Server user interface shown to a user who is a member of that role. **Security:** The role’s administrative rights are restricted to administrating **Configurations** and **Servers**. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-10.png) As a result, if a user that has that role logs in to the Lasernet Config Server, they do not have access (in the **Tools** area) to manage **Users and Groups** and **Security Roles**. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-11.png) **Deployment rights:** The user’s role’s deployment rights are restricted to deploying configurations to the Default server instance only. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-12.png) As a result, the list of accessible servers for deployment is now restricted to the Default server only. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-13.png) ### Example of Security Roles for a User Logged in to the Lasernet Developer This section describes an example security configuration for a role, then shows the effect of that security configuration on the Lasernet Developer user interface shown to a user who is a member of that role. **Security:** The views that are available to the role in Lasernet Developer do not include the Commands, Modules, or Modifier views, because those checkboxes are not selected in the role’s security configuration. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-10.png) To see the effect of this security configuration, first you must log in to the Lasernet Developer application as a user that is a member of the role that has the restricted rights described above. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-14.png) When you log in to the Lasernet Developer for the first time, the list of recently used configurations (in the lower part of the window) is empty. This list is stored in the Lasernet Config Server for each user. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-15.png) Because there is currently no list of recently used configurations, click **Open configuration** to open an already existing configuration (that is stored in Lasernet Config Server). Find the configuration that you want to use, then click **Open**. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-16.png) After the Lasernet Developer loads, the Tools and Profiles tabs (see red-outlined area in the image below) enable the current user to add and edit the following object types: - Form - Subforms - Phrases - Resources - Printer Profiles - Regional Profiles - Barcode Profiles As a result of the configuration of the user’s security role, the **Modules**, **Commands**, and **Modifiers** buttons that can appear in the Tools tab are hidden. Consequently, the user has no access to the functionality in Lasernet Developer that enables users to add, edit, and remove those types of object. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-17.png) Users with restricted rights for viewing and writing specific object types can only import and export those same object types. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-18.png) However, users that have restricted rights to add, edit, or delete particular types of object can access and add all object types to the configuration from the following dialogs in the editors: - Modifier events - Overlays - Grab file dialog - Connections - Destinations - Scripts The example screenshot below shows the **Edit Form Modifier** event window in the Lasernet Form Editor. This window can be accessed by all users. Although the logged-in user has restricted rights to the parts of Lasernet Developer that enable users to add, edit, or delete particular types of object, the user can access all object types in this window. But, they cannot edit them. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-19.png) ## Monitor The Monitor security roles relate to the Lasernet Monitor application and define the server instances to which the user has access. Select the **Monitor** section and click **Add** to add a new role. Click the Servers tab to view and amend the access rights for each instance. Select the **Allow** checkbox to grant access rights to the corresponding instance. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-20.png) Use the Members tab to add groups to this role. > [!WARNING] > Important > > The ability for a Lasernet Developer user to download grab files is managed by the **Monitor -> All rights** role. For more information, see [Allow a User to Download Grab Files When Using the Lasernet Developer](/docs/manage-security-roles-10#allow-a-user-to-download-grab-files-when-using-the-lasernet-developer). ## Client Use the **Client Role Properties** window to add users, groups, or both, to a role that allows users to log in to the Lasernet Client. You can also set access rights to read, write and delete documents / jobs. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-21.png) **Administrators** are members of the **All Rights** role, so they have full access permissions. On the Security tab of the **Client Role Properties** window, you can specify whether Administrator rights are granted to role members. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-22.png) On the Members tab, you can specify which access rights (**Write** and **Delete**) are granted to the local Lasernet Core users/groups or Active Directory users/groups that are listed on the Members tab. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-23.png) ### Lasernet Client If you log in to Lasernet Client as admin, you can access all jobs. Whereas if you log in to Lasernet Client as a restricted user with a mapped security role, you will see only specific jobs. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-24.png) ### Security Roles Mapping in Lasernet Developer ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-25.png) > [!NOTE] > Note > > Security Profiles defined in Lasernet 9 or older are not migrated to Lasernet Core 10 and must be added to the Lasernet Config Server 10 by an Admin user. The name of a security role added via the modules Security tab in Lasernet Developer will be migrated into Lasernet Core, retaining the name. If the security roles added to the Lasernet Config Server 10 use the same names, and the user and groups assigned to the role are the same, they are compatible with older versions after upgrading to Lasernet Core 10. New security roles added to the Lasernet Config Server are loaded in the Lasernet Developer every time the **Security Role Mapping Properties** dialog opens; therefore, the configuration does not require reloading. ## Printer Service The Printer Service security roles relate to the Lasernet Printer Service application and specify which Printer Services the user can work with. Select the Printer Service section and click **Add** to add a new developer role. Click the **Deployment** tab to view and amend the access rights for each Printer Service instance. Select the **Allow** checkbox to grant access rights to the corresponding Printer Service instance. ![](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Setting/ln10-manage-security-roles-10-image-26.png)