Skip to main content
Skip table of contents

Profiles

A user profile defines the access rights of a user to the features of the Nexthink web interface.

Accessing Profiles

  1. Select the Administration module from the main menu.

  2. Select Profiles under the Account management section.

  3. Hover over an existing profile to reveal the edit icon on the right side of the row. Click on the edit icon to change an existing profile.

Accessing Profiles

Creating a new profile

Click the New profile button in the top-right corner of the profile administration page to configure a new profile:

  • Name: Enter the name of the profile.

  • Description: Enter a profile description.

Configuring a profile

Landing page

Define a custom landing page for the profile. The users with this profile land on the page after logging into the Nexthink web interface. Ensure that the users of the profile have the necessary permissions to view the page, otherwise, an error message appears.

  • Leave the textbox empty or enter / for the system to redirect the user to the first module in the main menu. The module may differ based on the user license and permissions.

  • Enter a relative path to the page you want the users to land on after logging into the Nexthink web interface. For example, the relative path of this URL https://eu.nameofinstance.cloud/strategic-eo/overview is /strategic-eo/overview . If the string is not a valid path, an error message appears to the user after the login.

  • Test if the landing page is working properly after assigning the profile to a specific user.

Data privacy

Select the Data privacy settings for the profile:

  • anonymous users, devices, destinations and domains: users with this profile cannot view the names of users, devices, destinations or domains.

  • anonymous users and devices: users with this profile cannot view the names of users or devices.

  • anonymous users: users with this profile cannot see the names of users.

  • none (full access): users with this profile have full access to the collected data.

View domain

Define the scope of devices, related events, and inventory objects a profile can view.

  • Full access: The profile can access all Nexthink data

  • Limited access: Select the list of entities that the profile can see. Only devices, events, and inventory objects associated with those entities are visible to the user with this profile.

The entities are defined in the Organization tab of the Product configuration page.

Note that a user profile with a limited view domain can list all users but cannot drill down to related devices and events if they are not part of its view domain. Refer to the View domain documentation for more information.

Permissions

The Permissions tab lets you configure the permissions granted to the users with the assigned profile.

Grant permissions at the feature level, for example, View all Campaign dashboards or at the content level to view a specific Campaign dashboard, edit a specific investigation, or trigger a remote action.

Manage permissions

When you share a content item with a profile, you can review and manage the permissions on the Profiles page:

  • Set permissions on selected (content items) enables users to change permissions for selected content items of the feature, for example, specific campaigns or remote actions.

  • Add (content items) enables users to add specific content items to the feature, for example, specific investigations or live dashboards.

  • Depending on your feature-level permissions, you can select or deselect permissions for each content item.

Specify permissions for each feature of the product:

You may see permissions for features that you have not subscribed to or technical previews you are not participating in. Refer to the licenses your company has purchased from Nexthink.

Administration

  • Administrator rights enable users to (requires full View domain access):

    • Create and manage content.

    • Create and manage other user accounts.

    • Create and manage profiles and permissions.

    • Configure the product.

    • Create and manage connectors.

    • Manage the product license.

    • Access the Audit Trail API (requires a local user).

  • Manage all custom fields enables users to create, edit and delete custom fields, as well as to set values for manual custom fields.

    • To delete custom fields, users also need the Manage all ratings permission.

    • Users that don't have Manage all custom fields permission enabled but have permission to View all checklists (see Diagnostics permissions) can still see custom field values in checklists. 

  • Manage all NQL API queries (technical preview) enables users to:

    • Create new NQL API queries

    • Update all existing  NQL API queries

    • Read all NQL API queries

    • Delete all NQL API queries

  • Manage all ratings enable users to create, edit and delete ratings (requires Manage all custom fields permission). Users that don't have this permission enabled but have the Run investigations permission can still see rating values when writing NQL investigations.

  • Manage collectors enables users to configure the Collector update groups (requires full View domain access). 

  • Manage data (GDPR) enables users to:

    • Retrieve all the personal data linked to a user or a device.

    • Anonymize all the data linked to a user or a device.

    • Configure data retention.
      Refer to the Data management (GDPR) documentation for more information.

Alerts

The profile requires full View domain access for Alerts permissions.

  • Manage all alerts enables users to:

    • Create new alerts.

    • Edit all existing alerts.

    • Delete all alerts.

    • Share all alerts.

  • View all alert dashboards enables users to monitor all alerts in the overview dashboard. Users that don’t have this permission enabled but have the Run investigations permission still have access to the Alerts data using NQL or Device View.

Applications

The profile requires full View domain access for Applications permissions.

  • Manage all applications enables users to:

    • Create new applications.

    • Edit all existing applications.

    • Delete all applications.

    • Share all applications.

    • Publish

  • View all application dashboards enables users to monitor all applications on the Overview page and on all Applications dashboards. Users who don’t have that permission enabled but have the Run investigations permission still have access to the Applications data when using NQL or Device View.

Campaigns

  • Manage all campaigns enables users to (requires full View domain access):

    • Create new campaigns.

    • Edit all existing campaigns.

    • Delete all campaigns.

    • Share all campaigns.

    • Publish all campaigns.

    • Configure campaign branding.

  • Trigger manually all campaigns enables users to trigger all manual campaigns from the Investigation module.

  • View all campaign dashboards enables users to see the results of all campaigns (requires full View domain access).

Collaboration Tools

Requires the Collaboration Experience license.

  • View all collaboration tools dashboards enables users to see the Collaboration Tools module and associated dashboards.

Diagnostics

  • Manage all checklists enables users to :

    • Create new checklists.

    • Edit all existing checklists.

    • Delete all checklists.

    • Share all checklists.

  • Manage Amplify enables users to configure the Amplify ITSM integration browser extension. It requires the Data Privacy to be set to None or Anonymous users.

  • View all checklists enables users to view all checklists in the Device View. You can also map specific checklists to the profile via the checklist content-sharing feature.

  • View Amplify enables users to access the Amplify ITSM browser extension. It requires the Data Privacy to be set to None or Anonymous users.

  • View device view enables users to access the device timeline and checklists for detailed troubleshooting and analysis of the device.

  • View Diagnostics dashboards enables users to see the Diagnostics panel to identify possible causes of issues (requires full View domain access).

Digital Experience

The profile requires full View domain access for Digital Experience permissions.

  • Manage Digital Experience Score enables users to configure the list of applications and the score metrics monitored in the Digital Experience module.

  • View Digital Experience dashboard (requires Experience Central license) enables users to monitor the digital employee experience (DEX).

Investigations

  • Create private investigations; use global search enables users to create, edit, and execute investigations using NQL. It provides access to global search.

  • Manage shared investigations enables users to:

    • Edit all shared investigations.

    • Delete all shared investigations.

    • Share all shared investigations.

  • Share private investigations enables users to share the investigations they have created with other users of Nexthink.

  • View Nexthink Assist (technical preview) allows users to interact with the AI-based system for writing NQL queries and other Nexthink platform help-related topics.

  • View shared investigations enables users to view all shared investigations.

Live dashboards

  • Manage all dashboards enables users to (requires Run investigations permission):

    • Create new dashboards.

    • Edit all existing dashboards.

    • Delete all dashboards.

    • Share all dashboards.

  • View all dashboards enables users to view all dashboards created in the system.

Nexthink Library

View all Nexthink Library content enables users to access the in-product Nexthink Library where they can view all the pre-configured content offered by Nexthink. Users with this permission also need the Manage all ... permissions of the specific features they want to install the library content for. For example, Manage all remote actions to install the content for remote actions.

Remote actions

  • Execute all remote actions enables users to execute all remote actions.

  • Manage all remote actions enables users to (requires full View domain access):

    • Create new remote actions.

    • Edit all existing remote actions.

    • Delete all remote actions.

    • Share remote actions from the Remote Actions Administration page. Refer to the Manage remote actions documentation for more information.

  • View all remote action dashboards enables users to see all executions of remote actions in the overview dashboard. Users that do not have this permission but have the Run investigations permission still have access to all remote action results using NQL.

Software metering

  • Manage all software metering enables users to:

    • Create new software metering.

    • Edit all existing software metering.

    • Delete all software metering.

  • View Software metering dashboards enables users to see the Software metering overview page, as well as individual software metering pages.

Workflows

Requires the Nexthink Flow license.

  • Execute all workflows enables users to run all workflows (requires full View domain access).

  • Manage all workflows enables users to (requires full View domain access):

    • Create new workflows.

    • Edit all existing workflows.

    • Delete all workflows.

    • Share all workflows.

  • View all workflows dashboards enables users to see all workflow executions on the Workflows administration page. Users that do not have this permission enabled but have the Run investigations permission still have access to all workflow execution results using NQL.


RELATED TASKS

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.