Overview: Control access to your online schedule
In most cases, it is preferable to restrict access to your schedule so that not just anyone can view or make changes to it. The system lets you specify precisely who can use your appointment schedule, what information they can see and what they can modify. Since this access model is one of the more complex aspects of the SuperSaaS system, test your schedule from a user’s perspective to confirm it works as intended.
Three types of users
When it comes to controlling access to schedules, the SuperSaaS system distinguishes between three types of users.
- The administrator: each account has just one administrator, typically the person who created and manages the account. An administrator has full control over all account, schedule and user settings.
- Superusers: regular users with additional rights. Create superusers and provide them with additional capabilities to manage schedules and bookings. For example, assign the superuser status to colleagues to make or change appointments on behalf of other people.
- Users: people who actually make bookings in the schedules within your account, for example your customers, members or students. You can either require users to register before booking, or allow them to schedule appointments without logging in. If your account has multiple schedules, users only need to register once to access all schedules associated with your account.
Who can sign up as a user?
All settings regarding who exactly can register for using your schedules are found under Access Control. Note that these settings only apply if you require users to register. They’re irrelevant if you allow people to book without having to log in.
On this page, you can configure the registration process, including the steps a new user takes when signing up. Users are linked to an account and, by default, have access to all schedules within that account once registered. If you prefer to use different registration processes with different schedules you could consider creating multiple SuperSaaS accounts.
What can users do on my schedule?
Whether registration is mandatory for a schedule is configured on the Configure > Access page of each individual schedule. Here you define what users (and superusers) can do with respect to adding, updating and deleting bookings. This page also allows you to define which information about the bookings is made visible to regular users. The administrator always has access to all booking details.
User Groups enable fine-grained control over schedule access
By default, all users in an account have access to all schedules on that account. For more complex requirements, like allowing only specific users to access certain schedules, you can assign users to groups. A schedule can also be assigned to one or more groups. The result will be that only users from those groups will be able to access that specific schedule. User groups also allow a workflow where users have to wait for approval before being allowed to access a schedule.