Role-based access control for signage teams

Role-based access control (RBAC) grants people permissions through their role rather than one by one. A "menu editor" can change prices; only an "admin" can delete a layout or add a screen. It's how a growing signage operation stays safe as more hands touch the system.

What RBAC is

Instead of toggling dozens of switches per person, you define a handful of roles once, then assign people to them. Change the role, and everyone in it updates at once. It's the access model enterprises expect — and the one many signage tools charge extra for, or omit entirely.

Why it matters for signage

Screens are public. A wrong price on a menu board or a deleted layout is visible to every customer instantly. RBAC contains that risk: front-line staff get exactly the access they need and nothing more, so a mistake can't cascade.

The permission model

Pando's access control grants four actions — view, create, update, delete — independently per module (content, schedules, screens, users). That granularity means "can edit content but can't touch screens or people" is a single, clear role.

Roles that work

• Viewer — sees dashboards and screens; changes nothing. Good for stakeholders.
• Content editor — create/update content and schedules; no screen or user admin.
• Site manager — full control of one location's screens and content.
• Admin — everything, including roles and billing. Keep this list short.

Start with these four and add custom roles only when a real need appears. Pair with screen grouping so multi-site teams — see hospitality — stay scoped to their own displays.

Frequently asked questions

How is RBAC different from just having logins?
Logins say who you are; RBAC says what you may do. Roles bundle permissions so access is consistent and easy to audit.

Can I make a role that edits content but not screens?
Yes — permissions are per-module and per-action, so "content: create/update, screens: none" is one role.

Is there a limit on custom roles?
Pando supports ready-made roles plus unlimited custom roles, so you can mirror your exact org structure.