Permissions M–Z
You add permissions to a user's role to control the user's access to a machine. You use Connect on-Device Studio to configure role permissions.
Note
Some permissions require additional permissions to function as intended.
If additional permissions are required, a dialog box automatically opens. Press Ctrl + space in the dialog box to show a list of available additions.
The following permissions are available for software version 3.15 and later. The Role column shows the roles automatically assigned the permission after a clean installation.
Permission | Description | Role |
|---|---|---|
M | ||
MACHINE_RECOUNT | Permission to make a full recount of the machine contents. | — |
MACHINE_RECOUNT_FOUR_EYES | Requires a second user with this permission to perform the machine recount operation. Requires the MACHINE_RECOUNT permission. | — |
MACHINE_TEST | Permission to access the machine test menu. | Administrator, SDS_Administrator, CDS-820j_Administrator |
MACHINE_TOTAL_PER_BOX | Permission to make a printout of the machine contents per box. Note! Enabled by the combination of the MACHINE_TOTAL_PER_BOX and PRINT_MACHINE_TOTAL permissions. | — |
MACHINE_TOTAL_PER_BOX_LIMITED( true ) | Permission to limit the MACHINE_TOTAL_PER_BOX to the specified box. Lists the specified boxes on MachineTotal receipts. For example: MACHINE_TOTAL_PER_BOX_LIMITED:AB0MACHINE_TOTAL_PER_BOX_LIMITED( true ) REVISION SET_TIME_DELAY_LOCK | machine— |
MACHINE_TOTAL_PER_TYPE | Adds a total per type of money for example, dispensable, not dispensable) to the machine total receipt. Available from Connect on-Device version 2.17.6. | — |
MAINTENANCE | Enables maintenance tasks from the service terminal. Depends on the Service mode permission. | Administrator, Maintenance, SDS_Administrator, CDS-820j_Administrator |
MANUAL_REFILL | Needed to replenish coins by filling the hoppers manually. | Administrator, CIT2 |
MANUAL_REFILL_SCAN | Prompts the user to provide a scanned barcode during manual refill operations. The user can scan or enter the barcode manually before filling the hoppers manually. Requires the MANUAL_REFILL permission. | — |
MANUAL_REFILL_VALUE_INPUT | Permission to input/display amounts instead of quantities in manual refill. | — |
MENU_LAYOUT( true, true ) | Permission to use an alternate number of rows/cols specified by addition in the select service menu. | — |
MOVE_COINS_TO_LEVEL | Permission to move coins from the coin dispensers to the low target level to the transport box. All coins above the set low level in the coin dispensers are moved to the transport box. Also, permission to empty the transport box. | Administrator, CIT |
MOVE_COINS_TO_TARGET_LEVEL | Permission to move coins to overflow until the defined target level is reached. Define the target level in the | — |
MOVE_NOTES | Permission to move notes from recycling boxes to transport boxes (or acceptance boxes). Note: Only for note recyclers. | Administrator |
MOVE_NOTES_ALLOW_EDIT | Permission to edit the mixes that describe what should be remaining after the move, before the move starts. Note: This permission requires the MOVE_NOTES permission. | Administrator |
MOVE_NOTES_ALLOW_EDIT_NON_BUNDLES | Permission to edit non-bundle-sized moves. | — |
MOVE_NOTES_ALLOW_EMPTYING | Permission to empty the transport box/acceptance box during the move notes operation, in case it gets full. Without this permission, it will stop once the transport box is full. This permission requires the MOVE_NOTES permission. | — |
MOVE_NOTES_ALWAYS_EMPTY | The move notes flow always ends with the emptying of the transport box (or acceptance box). The move notes flow does both the move notes and the empty note boxes. Note: Requires both MOVE_NOTES and MOVE_NOTES_ALLOW_EMPTYING (but it does not require EMPTY_NOTE_BOXES). | — |
MOVE_NOTES_LIMIT_CURRENCIES | Limits the currencies that can be moved in MOVE_NOTES. | — |
MOVE_NOTES_NUMERIC_KEYPAD | Permission to use a numeric keypad instead of preset values in MOVE_NOTES. | — |
MOVE_NOTES_VALUE_INPUT | Permission to input/display amounts instead of quantities in move notes. Note: This permission requires the MOVE_NOTES_NUMERIC_KEYPAD permission | — |
MULTIPRO_ACCOUNTING | Permission to access the accounting menu for the car wash payment terminals (CarWash Pro). This permission has functions to get accounting information and to see/redeem overpayments. | — |
MULTIPRO_ADVANCED_SETUP | Permission for miscellaneous configurations for the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_COMPONENT_SETUP | Permission to do hardware setup and configuration for the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_FREE_RECEIPT | Permission to print a receipt with a refund amount on the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_FREE_TOKENS | Permission to dispense free tokens on the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_MACHINE_SETUP | Permission to configure the user flows and available purchases/prices for the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_MANUAL_WASH | Permission to start a manual (free) car wash on the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_POSOPERATIONS | Permission to see and list POS operations for the car wash payment terminals (CarWash Pro). | — |
MULTIPRO_VARIOUS_SETUP | Permission for miscellaneous configurations for the car wash payment terminals (CarWash Pro) | — |
N | ||
NO_DISPENSE | Disables the dispense function. | — |
NO_RECEIPT | Do not give the users any receipts. | — |
NOTE_RECOUNT | Permission to do a note recount of the machine content. | — |
NOTE_RECOUNT_FOUR_EYES | Prompts another user with permission to sign in and perform the operation. Requires the NOTE_RECOUNT permission. | — |
O | ||
OPEN_SERVICE_DOOR: | Permission to open service doors with electric locks. The options are:
| Administrator |
OPERATOR_VIEW | Permission to open and log in to the operators/administrators view. | Administrator, SDS_Administrator, CDS-820j_Administrator |
OPTIONAL_RECEIPTS | For every receipt, it first shows the receipt on the screen and asks if the receipt should be printed or not. Available from Connect on-Device version 3.8.0. |
|
OUT_OF_USE_OPERATION | Allows the user to log in to the normal select service menu as long as there are no fatal errors, even if the machine is out of use. | SDS_Administrator, SDS_CIT, CDS-820j_Administrator, CDS-820j_Cashier |
P | ||
PACKAGE_ROLLBACK | Permission to roll back the latest package sent from Connect. | — |
PARALLEL_BAG_DROP_NO_DUP_CHECK | Permission to drop the same bag in multiple deposit sessions during parallel bag drop. Requires the PARALLEL_BAG_DROP_ZERO_AMOUNT permission. For example, used at a store where customers scan their cards during deposit to identify themselves. | — |
PARALLEL_BAG_DROP_ZERO_AMOUNT | Enables barcode scanning for bag drop during normal deposit. The values of the bags will not be recorded. | — |
PRINT_DAILY_OPERATIONS | Permission to print all transactions for the day. | Administrator, SDS_Administrator, CDS-820j_Administrator |
PRINT_FINAL | Permission to print a receipt with all transactions for the day. All transactions that have occurred since the last receipt was printed are included. | Cashier |
PRINT_MACHINE_TOTAL | Permission to print a receipt for the machine's contents. | Administrator, CIT, SDS_Administrator, SDS_CIT, CDS-820j_Administrator |
PRINT_OWN_TRANSACTION_HISTORY | Permission to print own transactions. | — |
PRINT_RECEIPT_HISTORY | Permission to print old receipts. | Administrator, SDS_Administrator, CDS-820j_Administrator |
PRINT_TRANSACTION_HISTORY | Permission to print the daily transactions for any date. | Administrator, SDS_Administrator, CDS-820j_Administrator |
PRINT_USER_LIST | Permission to print the system user list. Available from Connect on-Device version 2.13.0. | — |
PRINT_USER_LIST_EXCLUDE_ROLE( true ) | Permission to exclude users of a certain role from the user list. | — |
PRINT_WORKUNIT_FINAL | Permission to select a work unit and print all transactions for the selected unit since the last printout. | — |
PRINT_YESTERDAYS_OPERATIONS | Permission to print all transactions for yesterday. | — |
PURGE_CIMA | Enables functionality to empty rolls, regardless of the registered count. | Administrator |
PURGE_CIMA _FOUR _EYES | Enables secondary login to perform the function PURGE_CIMA. | — |
PURGE_COINS | Permission to move all coins to the transport box and to empty the transport box. | Administrator |
PURGE_COINS_FOUR_EYES | Prompts another user with permission to perform the purge coins operation. Requires the PURGE_COINS permission. Available from Connect on-Device version 3.16.0. | — |
PURGE_COINS_TO_OUTLET | Permission to dispense all coins to the cash drawer/cups until the dispensers are empty. | Administrator |
PURGE_NOTES_TO_BAG | Permission to move notes in a dispenser to overflow until the end-of-film is reached. | — |
PURGE_NOTES_TO_BAG_FOUR_EYES | Prompts another user with permission to perform the purge notes to bag operation. Requires the PURGE_NOTES_TO_BAG permission. Available from Connect on-Device version 3.16.0. | — |
R | ||
REBOOT_COMPUTER | Permission to reboot the computer. Available from Connect on-Device version 3.2.4. | SDS_Administrator |
RECEIPTS_REQUEST_CONTINUE | Displays a Continue button for a second receipt. Requires the CC_ALL_RECEIPTS or CC_BOX_RECEIPT permission to function as intended. Available from Connect on-Device version 3.2.5. | — |
RECEIPT_REQUEST_OPTIONAL | Allows the user to cancel printing the second receipt. Requires the CC_ALL_RECEIPTS or CC_BOX_RECEIPT permissions and the RECEIPTS_REQUEST_CONTINUE permission to function as intended. Available from Connect on-Device version 3.42.0. | — |
RECEIPT_TOTAL_CUT | Makes the receipt printer perform a total cut instead of a partial cut for printed receipts. Note! This only applies to Custom TPL-80 and Custom Kube printers. Custom VKP-80 always performs a total cut since it has a presenter. | — |
REFILL_MANUAL_DROP_BY_DENOMINATION | Enables a Manual drop button in the post-refill screen that launches bag drop by denominations. After the process has been completed, 2 messages are sent, one for a refill and one for a bag drop with claimed value. Available in Connect on-Device version 3.36.0 and later. | — |
REPLENISH | Permission to replenish certain devices, for example, REPLENISH_LIMITED: NMD.1, used for HCM and NMD units. From Connect on-Device version 3.1.1, this permission was removed from the Administrator role. | CIT, CIT2 |
REPLENISH_LIMITED | Permission to replenish selective boxes, for example, {@code REPLENISH_SELECTIVE:*}. | — |
REPLENISH_SCAN | Prompts the user to provide a barcode scan during the replenishment operation. Requires the REPLENISH permission. | — |
REPLENISH_SELECTIVE | Needed to replenish selective cash boxes instead of all at once. Requires the REPLENISH permission. | — |
REPLENISH_TIMELIMIT | Allows you to set a time range during which the user is allowed to replenish note boxes. The format is <HH>:<mm>-<HH>:<mm>. Requires the REPLENISH permission. Available from Connect on-Device version 3.15.0. | — |
REPLENISH_VALUE_INPUT | Enters value instead of count in the replenish page. Requires the REPLENISH permission. | — |
REQUIRES_OTA_MFA | Enables multi-factor authentication using an OTA. Users with this permission are asked for an additional OTA scan right after performing a standard authentication process. | — |
RESOLVER_COIN_LOWER | Gives the user permission to use the specified resolver. Needed to resolve errors in the lower part of the coin unit. Available from Connect on-Device version 2.8.8.1. | Administrator, CDS-820j_Administrator |
RESOLVER_COIN_UPPER | Gives the user permission to use the specified resolver. Needed to resolve errors in the upper part of the coin unit. Available from Connect on-Device version 2.8.8.1. | Administrator, CDS-820j_Administrator |
RESOLVER_NOTE_LOWER | Gives the user permission to use the specified resolver. Needed to resolve errors in the lower part of the note unit. Available from Connect on-Device version 2.8.8.1. | Administrator |
RESOLVER_NOTE_UPPER | Gives the user permission to use the specified resolver. Needed to resolve errors in the upper part of the note unit. Available from Connect on-Device version 2.8.8.1. | Administrator |
RESOLVER_RECOUNT_ROLL_FOUR_EYES | Prompts another user with this permission to perform the operation. | — |
RETURN_ESCROW_TIMEOUT | Enables the return escrow process to time out. | — |
REVISION | Print (additional) receipts after emptying and refilling during EMPTY_REFILL operation. Permission to make a full recount of the machine contents. Empties coin rolls, dispensers, and transport boxes/overflows in an RCS before redepositing. | — |
RFE_SLAVE_SETUP | Permission to search for and connect to slave devices on RFE products. | — |
S | ||
SERVICE_COUNTERS | Permission to view/reset service counters and to clean CAM, coin dispensers, coin diverter (RCS 400 2.0), and transport box. | — |
SERVICE_MODE | Gives access to the service terminal. | Administrator, CIT, CIT2, Maintenance, SDS_Administrator, CDS-820j_Administrator |
SET_DEPOSIT_ACCOUNTING_DATE | Permission to set the accounting date for a single deposit. | — |
SET_DISPENSE_ACCOUNTING_DATE | Permission to set the accounting date for a single dispense. | — |
SET_GLOBAL_ACCOUNTING_DATE | Permission to set the accounting date for the machine until the expiration time/date. The settings affect all users and have an end date. | — |
SET_OUT_OF_USE | Permission to set Connect on-Device Out Of Use. Available from Connect on-Device version 3.2.2. | — |
SET_SESSION_ACCOUNTING_DATE | Permission to set the accounting date for the session. The session accounting date expires at logout. | — |
SET_SYSTEM_TIME | Permission to change system time. Currently only supported on machines running Linux, for example, CDS-820j. | SDS_Administrator |
SET_TIME_DELAY_LOCK | Permission to set a time delay lock on doors. Makes it possible to configure the time delay before a door can be unlocked and for how long the door remains unlocked. | — |
SHOW_BALANCE_ON_PRINT | Enables printing the user balance on receipts. Requires the SHOW_USER_BALANCE permission to work. | — |
SHOW_CONTAINER_IDS_ON_PRINT | Enables printing of affected container IDs on deposit receipts. | — |
SHOW_DEPOSIT_BALANCE | Enables additional info in the deposit screen, showing the current balance. Has no effect unless the user has SHOW_USER_BALANCE permission. | — |
SHOW_USER_BALANCE | Enables a screen showing the current balance and an optional list of recent transactions during login. Addition: Maximum number of recent transactions to include (0..n) Note! This permission is currently only supported in TransportConnect. | — |
SHUT_DOWN_PROGRAM | Permission to shut down the program from the Operator Menu. | Administrator, CDS-820j_Administrator |
SHUTDOWN_COMPUTER | Permission to shut down the computer. Available from Connect on-Device version 3.2.4. | SDS_Administrator |
SMART_VAULT_DEPOSIT | Makes it possible to register deposits of cash into a smart vault (dumb safe). | — |
SMART_VAULT_DEPOSIT_CUSTOM_DATA | Makes it possible to register deposits of cash into a smart vault (dumb safe) with the addition of custom data entry before making the deposit. | — |
SMART_VAULT_DEPOSIT_MIX_ALL(SMART_VAULT_DEPOSIT_MIX + "*") | Adds the option of selecting a dispense mix in the smart vault deposit flow. Enables all available mixes. Requires that you have either SMART_VAULT_DEPOSIT or SMART_VAULT_DEPOSIT_CUSTOM_DATA as well. Note:
| — |
SMART_VAULT_DEPOSIT_MIX("SMART_VAULT_DEPOSIT_MIX:", true) | Adds the option of selecting a dispense mix in the smart vault deposit flow. Add one permission per mix you want to dispense. Requires that you have either SMART_VAULT_DEPOSIT or SMART_VAULT_DEPOSIT_CUSTOM_DATA permission as well. Note:
| — |
SMART_VAULT_QR | Enables the possibility to scan a QR code with the amount in the smart vault flows. | — |
SMART_VAULT_TRANSFER_REFILL_CUSTOM_DATA | Allows the user to transfer money from VaultConnect to refill RCS (only possible when VaultConnect is running on the computer controlling the RCS) with the addition of custom data entry before making the transfer. | — |
SMART_VAULT_TRANSFER_REFILL | Makes it possible to transfer money from VaultConnect to refill RCS. This is only possible when you have VaultConnect running on the computer controlling the RCS. | — |
SMART_VAULT_WITHDRAWAL_CUSTOM_DATA | Makes it possible to register withdrawals of cash from a smart vault (dumb safe) with the addition of custom data entry before making the withdrawal. | — |
SMART_VAULT_WITHDRAWAL_MIX_ALL(SMART_VAULT_WITHDRAWAL_MIX + "*") | Adds the option of selecting a dispense mix in the smart vault withdrawal flow. This enables all available mixes. Requires that you have either SMART_VAULT_WITHDRAWAL or SMART_VAULT_WITHDRAWAL_CUSTOM_DATA as well. Note:
| — |
SMART_VAULT_WITHDRAWAL_MIX("SMART_VAULT_WITHDRAWAL_MIX:", true) | Adds the option of selecting a dispense mix in the smart vault withdrawal flow. Add one permission per mix you want to dispense. Requires that you have either SMART_VAULT_WITHDRAWAL or SMART_VAULT_WITHDRAWAL_CUSTOM_DATA as well. Note:
| — |
SMART_VAULT_WITHDRAWAL | Makes it possible to register withdrawals of cash from a smart vault (dumb safe). | — |
STAY | Permission to return to the service selection after each operation. | Administrator, SDS_Administrator, CDS-820j_Administrator |
T | ||
TEST_SWITCHES | Permission to view the status of doors/switches in operator view. | Administrator, Maintenance, SDS_Administrator, CDS-820j_Administrator |
THEME( true, true ) | Permission to use the theme specified by addition. | — |
TOOLBOX("TOOLBOX:", true ): | Permission to use the toolbox in the operator view. Permissions for the following actions are available:
For more information, see: | Administrator, SDS_Administrator (EJECT_CARD, OPEN_CLOSE_SHUTTER, OPEN_SAFE_DOOR, RESET), CDS-820j_Administrator (EJECT_CARD, CLOSE_SHUTTER, RESET) |
TRANSACTION_INFO | Permission to include arbitrary information fields/tags from addition, such as 'pickup' or 'audit', in the transaction(s) performed by a user. 1..n | — |
TRANSPORT_UNIT_PICKUP | Permission to do pickup from SPS 700 using the transport unit. | — |
TRANSPORT_UNIT_PICKUP_FOR_REPLENISH | Permission to do pickup from SPS 700 using the transport unit to replenish the other units, that is, BNR. | — |
TRANSPORT_UNIT_REPLENISH | Permission to load notes into SPS 700 from the transport unit. | — |
U | ||
UNBLOCK_USERS | Permission to unblock deactivated users. | — |
USB_PROTECTION_EDIT | Enables the USB protection button in the Operator menu. | — |
USB_PROTECTION_TEMP_OFF | Enables a button allowing a user to disable USB protection temporarily. The user can check the status, but can't disable/enable the protection. | — |
USER_ALLOCATION | Similar to WORK_UNIT_ALLOCATION, that is, the user must select an allocation when logging in, unless already allocated. See the lane allocation feature for details. Don't combine this permission with WORK_UNIT_ALLOCATION. It may cause unpredictable behavior. Available from Connect on-Device version 3.14.0. | — |
USER_ALLOCATION_DEPOSIT | Allows the user to make deposits even if the user has not been allocated. A supervisor needs to be able to make a deposit regardless of the allocation state. Corresponds with WORK_UNIT_ALLOCATION_DEPOSIT. Available from Connect on-Device version 3.14.0. | — |
V | ||
VIEW_MACHINE_TOTAL | Permission to view the machine total on screen. Requires the PRINT_MACHINE_TOTAL permission. Available from Connect on-Device version 3.2.0. | SDS_Administrator, SDS_CIT |
VIEW_RECENT_TRANSACTIONS | Gives the signed-in user permission to view their recent transactions. | — |
VIEW_USER_BALANCE | Gives the signed-in user permission to view their current user balance. | — |
VU_PURCHASE | Enables the purchase screen Requires the SHOW_USER_BALANCE permission. | — |
VU_REFILL | Enables the refill screen and the control of the machine. Requires the Admin role | — |
VU_SHOW_BALANCE | Allows the user to see their balance on the receipts. Requires the SHOW_USER_BALANCE permission to make a purchase. Otherwise, the machine has no idea how much money the user has. Note! Replaced with SHOW_USER_BALANCE_ON_PRINT from CoD version 3.37.0 | — |
W | ||
WORK_UNIT | Permission to dispense a specific money mix by entering, for example, a flight number or a group name. Requires the user to enter the work unit, for example, flight number, department, before dispensing is allowed. Information about the work unit is printed on the receipt and is stored in the database. The work units are defined in the file workunits.xml. In this file, you can set work units for specific roles. For more information, see Adding a work unit. Available from Connect on-Device version 3.11.0. | — |
WORK_UNIT_ALLOCATION | The permission must be used in combination with the WORK_UNIT permission. Required on the user role to activate the lane allocation feature. Forces the user to select an allocation when logging in. If the user already has allocated a lane (work unit), no additional allocation is required. Don't combine with USER_ALLOCATION. Available from Connect on-Device version 3.13.0. | — |
WORK_UNIT_ALLOCATION_DEPOSIT | Allows the user to make deposits even if the work unit has not been allocated; that is, a supervisor should be able to make a deposit regardless of the work unit's allocation state. | — |
WORK_UNIT_ALLOCATION_AUTO_SELECT_ALLOCATION | Automatically selects allocation if there is an allocation with the same ID as the work unit. Requires WORK_UNIT_ALLOCATION permission. The screen where you select allocation isn't shown if the work unit name is identical to the allocation ID. A user who selects a work unit Available from Connect on-Device version 3.15.5. | — |
WORK_UNIT_BY_GROUP | Allows you to select a work unit group before selecting a unit, requires {@link #WORK_UNIT} | — |
WORK_UNIT_DAY_TOTAL_ON_RECEIPTS | Adds the sum of the currently logged-in work unit to the deposit and dispense receipts. Available from Connect on-Device version 3.9.0. | — |
WORK_UNIT_DAY_TOTAL_USE_ACCOUNTING_DATE | Uses the accounting date and not the creation date when calculating the work unit day total. Don't combine this permission with the WORK_UNIT_DAY_TOTAL_USE__SELECTED_ACCOUNTING_DATE permission. Available from Connect on-Device version 3.9.2. | — |
WORK_UNIT_DAY_TOTAL_USE_SELECTED_ACCOUNTING_DATE | Uses the selected accounting date instead of the current date when calculating the work unit day total. This permission is an addition to WORK_UNIT_TOTAL_ON_RECEIPTS. Don't combine this permission with the WORK_UNIT_DAY_TOTAL_USE_ACCOUNTING_DATE permission. Available from Connect on-Device version 3.14.5. | — |
WORK_UNIT_NO_CHECK | Permission to enter the work unit name without checking the file. Available from Connect on-Device version 2.10.1. | — |