MSL Admin Site Permissions

Your MSL System comprises two essential areas. Firstly, your MSL website is the public-facing part of the system where your members and other users can access information, services, and resources. Your MSL System also includes your MSL Admin site, accessible only to authorised Super Admins, which contains a suite of MSL Applications designed to manage various aspects of the MSL System, such as your Door Entry, Point of Sale, and Polling Station, along with a Report Server.



Access to your MSL Admin site is managed by your Contractual System Admins, typically two senior staff members within your organisation who are responsible for liaising with MSL as site administrators. They oversee the list of Super Admins, adjust their permissions, and revoke access when necessary. Access permissions for the MSL Admin site are separate from those for your MSL website. Having access to one does not automatically grant access to the other.


The MSL Admin site has granular permissions, enabling you to tailor access for your staff, ensuring they only see the data pertinent to their role, mitigating risks and making it easier for the user to find what they need. Access to both the MSL Admin site and MSL Applications is tiered, reflecting hierarchical roles; for example, a manager might have broader access to some areas than a supervisor or operator, ensuring appropriate authorisation levels.


Super Admins with Site Admin permissions can access an Access Log for auditing purposes. This log provides a detailed overview of login activities, including who accessed the MSL Admin site or launched an MSL Application on any given day, along with associated computer and IP address details. For more detailed access audit information, please contact support@ukmsl.com.


TABLE OF CONTENTS


You can access this feature from your MSL Admin site. Only Super Admins with Site Admins permissions can access the Users and Access Log windows.


Only current, genuine, staff at your organisation are permitted access to your MSL Admin site. If a third party requires access, contact support@ukmsl.com to discuss and to arrange a non-disclosure agreement before requesting access.


The use of generic login credentials to your MSL Admin site is not allowed or advised by MSL. If a data breach or incident occurs caused by a user with generic credentials, it may be impossible to trace the cause of the incident.


For further information, see MSL System Overview and MSL Applications


MSL Admin Site Roles


Please note that the descriptions provided below include all available windows and applications within the MSL Admin site. However, your ability to grant users access to certain features depends on the modules you are licenced for.
If you are interested in adding additional modules to your MSL System, please ask your Contractual System Admin to get in touch for a quote and to discuss the implementation of a module.


This table lists and describes the MSL Admin site roles.


Role NameDescription
Door Entry Operators CoreThis role grants users access to the Door Entry station, the Attendance station, and the Point of Sale and Web Till applications.
Users can handle sales transactions but cannot process refunds.
Users have no access to other areas of your MSL Admin site and cannot generate reports.
This role is activated upon request by contacting support@ukmsl.com.
Door Entry OperatorsThis role grants users access to the Door Entry station, the Attendance station, and the Point of Sale and Web Till applications.
Users can handle sales transactions but cannot process refunds.
Additionally, they can access Dashboards, the Report Server and specific windows within the POS submenu, such as Sales and Purchasers, view Finance Codes, and Person Transaction History windows.
Door Entry SupervisorsThis role grants users the same access as the Door Entry Operators role.
Additionally, Door Entry Supervisors can sell extra tickets and override product group sales limits ("Fix Tickets") through Door Entry (Windows application).
Election AdminsThis role grants users access to the Voting submenu for running election and referendum counts, updating default options, and generating voting reports. Additionally, they can access Dashboards and the Report Server.
Event AdminsThis role grants users access to manage Door Entry setup, Attendee Groups, and Banned Lists within the Events submenu, including generating event and attendance reports, and accessing the E-ticketing queue, if enabled.
Users can also manage Attendance sessions and setup, if enabled.
Additionally, they can access Dashboards, the Report Server, and view Finance Codes.
Membership AdminsThis role grants users access to full user account management in People and most group creation and updating features in Groups. Users can't change a group's Type, create or update Grouping Types, and have limited access to Bulk Add Requirements. Their permissions are restricted in Managing and Bulk Adding Permissions, with no access to the Set Default Permission window.

Users can access the Import and University Data submenus for managing data-linked groups and import issues. They can also bulk import events, check message delivery, and, if enabled, set up and update the HEAR system.

Additionally, they can access Dashboards and the Report Server, and view most areas in System Setup.
Polling Station OperatorsThis role grants users access to the Polling Station application.
Additionally, they can access Dashboards, and the Report Server.
Product AdminsThis role grants users access to the POS Admin application.
Additionally, they can access Dashboards, the Report Server and specific windows within the POS submenu, such as Sales and Purchasers and view Finance Codes.
Report ViewersThis role grants users access to the Report Server only.
Users should access the Report Server via the direct link https://[domainname]/reports/.
Site AdminsThis role grants users access to all parts of your MSL Admin site, except those exclusively for MSL. It is the highest permission level in your MSL Admin site.
To assign this role to a user, your Contractual System Admin should email support@ukmsl.com instead of using the usual method. Typically, this role is reserved for Contractual System Admins and more technical staff members who need to make configuration changes.
Till Operators CoreThis role grants users access to the Point of Sale and Web Till applications.
Users can handle sales transactions but cannot process refunds.
Users have no access to other areas of your MSL Admin site and cannot generate reports.
This role is activated upon request by contacting support@ukmsl.com.
Till OperatorsThis role grants users access to the Point of Sale and Web Till applications.
Users can handle sales transactions but cannot process refunds.
Additionally, they can access Dashboards, the Report Server and specific windows within the POS submenu, such as Sales and Purchasers, view Finance Codes, and Person Transaction History windows.
Till SupervisorsThis role grants users the same access as the Till Operators role, however, users can handle sales transactions and process refunds.
Till AdminsThis role grants users access to Point of Sale and Web Till applications.
Users can handle sales transactions, process refunds (including Bulk Refunds), and navigate all POS submenu windows, including Current Activity, Finance Codes (with importing and bulk updating), Person Transaction History, and POS Setup windows like Shops and Tills, Delivery Areas, Collection Points, and Tax Codes.


Users Fields

This table lists and explains the Users fields.


Field NameDefinition
(Full) NameThis is the user's name, including their first name and last name.
This field is mandatory.
Email AddressThis is the user's company email address.
Requests made with email addresses from domains such as Hotmail, Gmail, Outlook, etc. will not be authorised.
This email address is where the user's login credentials will be securely sent.
This field is mandatory.
UsernameThis username is used for accessing your MSL Admin site.
This field is mandatory. If left unspecified, the prefix of the email address will be used.
Do not include any spaces in the username; instead, if required, separate the first and last name with a period (.) (e.g. firstname.lastname).
There is a character limit of 20 characters.
Once the username has been saved, it cannot be updated except by deleting the user and recreating the account.
Allow User to Change their Own Password

If selected, the user will have the option to reset their password to something easier to remember using the User Information window in the MSL Admin site.

After receiving or setting a new password, the user must wait 24 hours before changing it again.

An MSL Admin site password must be at least 8 characters long and include a mix of uppercase and lowercase letters, numbers, and symbols.

This field is displayed only in the New User Request and Update User dialogs.
For further information, see How to Change Your MSL Admin Site Password.
RolesThis list defines the roles assigned to the user's account, dictating their access permissions to specific windows and/or MSL applications within your MSL Admin site.
For further information, see MSL Admin Site Roles and MSL Applications.
CreatedThis is the date and time when the user's account was created.
This field is displayed only in the Users window.
Site AdminThis field indicates if a user is a Contractual System Admin for your MSL System.
The options are:
  • Yes - The corresponding user is a Contractual System Admin
  • No - The corresponding user is not a Contractual System Admin
Contractual System Admins manage the list of Super Admins, adjust their permissions, and revoke access as needed.
Only MSL has the permissions to update this setting. If you need to update who your Contractual System Admin is, contact support@ukmsl.com providing information about the changes.
This field is displayed only in the Users window.
Edit User ()Click to open the Update User dialog.
For further information, see How to Request an Update to an Admin Site User Account.
Delete User ()Click to open the Confirm User Deletion dialog.
For further information, see How to Request the Deletion of an Admin Site User Account.


Access Log Fields

This table lists and explains the Access Log fields.


Field NameDefinition
DateThis is the date and time the respective user performed an action on your MSL Admin site.
Event Type

This refers to the specific action undertaken by the user.

The options are:

  • Login - Accessing the MSL Admin site, including Web Applications.
  • Logout - Exiting the MSL Admin site, including Web Applications.
  • Login failure - Attempting to access the MSL Admin site or Web Applications using invalid credentials.
  • Startup - Launching a Windows Application.
  • Shutdown - Closing a Windows Application.
UsernameThis is the information entered into the Username field.
Here, it is prefixed by UKMSL\.
ApplicationThis refers to where the action takes place - either the MSL Admin Site, a Web Application or Windows Application.
Computer NameThis is the label assigned to an individual's device, enabling it to be easily recognised and differentiated from other devices connected to the same network.
IP AddressThis is a numerical label assigned to devices connected to a network.
It identifies the device's network location, which may or may not be directly linked to the physical location of the service provider.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.