Authentication Management

Obscreen provides a very simple way to manage authentication for your Studio instance.

Enable Authentication

1. Go to Settings menu then General submenu.
2. Under Security section, you can Enable Authentication.
3. Now a new Security will appear in menu, click on Users submenu.

WARNING

You'll be logged out from the current session. Default credentials are admin for both username and password.

🎭 Roles

Obscreen implements a comprehensive access control system through user teams (groups) and role-based permissions.

• Owner there is only one owner per instance. No restrictions apply to owner.
• Admin there can be multiple admins per instance. No restrictions apply to admins.
• Content Manager can manage content only (Library and Playlists).
• Device Manager can manage devices only (Players, Studios and Playgroups).

👬 Teams

Teams allow you to organize users into logical groups, making it easier to manage access to specific content and devices. A user can belong to one team only, and their effective permissions are determined by their role within each team.

✋ Permissions and ownership

By default, when a user creates a new element (content, playlist, device, etc.), their team will automatically be applied to that element. However, only Owner and Admin users have the ability to edit team ownership:

• Navigate to the element's settings
• Look for the Permissions section in the settings panel
• Select the appropriate team to assign ownership
• Save the changes

This team assignment determines which users can access and modify the element based on their role and team membership.

🔎 Permission Details

The following table outlines the specific permissions for each role and team configuration:

🟡 Owner

• Full access (Content, Device, Security)
• All permissions can be altered

🟠 Admin

• Full access (Content, Device, Security)
• Alter permissions:
  • Team assigned: can only alter permissions for their team's elements
  • No team assigned: can alter permissions

🔵 Content Manager

• Limited access to Content
• Alter permissions:
  • Team assigned: can only alter permissions for their team's Content elements
  • No team assigned: can alter permissions

🔴 Device Manager

• Limited access to Device
• Alter permissions:
  • Team assigned: can only alter permissions for their team's Device elements
  • No team assigned: can alter permissions

I'm locked out of the Studio because I forgot my password. How can I reset it?

You have to start Studio with SAFE_MODE=true environment variable to bypass login and be able to reset the password.