Enabling the Configuration for a Sub-Administrator
This setup guide describes how you can enable the configuration for a sub-administrator.
In addition to the administrator access, a user access and a sub-administrator access can be set up for the Behnke Station.
The user access has a fixed, predefined scope of configuration rights. The administrator can specify which of the available user settings are enabled. These include, for example, the configuration of passwords, special time periods and dates, direct call keys, door opener codes, audio settings, or individual voice announcements. Settings beyond this predefined scope are not available to the user. A setup guide for the user can be found here: Enabling the Configuration for a UserThis page was last checked against version 6.56; the current version is 6.33. This notice is generated automatically and was not written by an editor.
The sub-administrator access, by contrast, is based on the administrator functions that are generally available. For the sub-administrator, you can specify precisely which areas and functions of the configuration are allowed or blocked. This makes it possible to set up an access with far-reaching administrative permissions without granting full access to all settings of the Behnke Station.
The administrator access has unrestricted access to the configuration of the Behnke Station.
It is assumed that the Behnke-Station is already set up to the extent that access to the web interface is possible. If this is not the case, please follow the instructions provided with your base electronics (manualsThis page carries no version. This notice is generated automatically and was not written by an editor.) and refer to the technical manualRecently updated — within the last 72 hoursThis page carries no version. This notice is generated automatically and was not written by an editor. to complete the basic setup.
1. Allowing Sub-Administration
- Open your browser
- Go to the web interface of the Behnke Station
- Log in
- Click the menu item in the sidebar on the left
- Navigate to the section Sub-administration
- Set the option Allow to the value Yes
- Click to save the configuration
Tip
If you only want to view the sub-administration and not set it up, leave the page afterwards via Log out without saving. The option Allow then remains set to no.
2. Setting the Sub-Administrator Password
In the delivery state, the sub-administrator password is subadmin. For security reasons, you should change this password immediately after commissioning, since a known default password poses a security risk.
Note
In a future version, default passwords will no longer be used. This increases the security of our products and at the same time meets fundamental cybersecurity requirements of the Cyber Resilience Act (CRA).
2.1 Permitted Characters
The following characters may be used for the sub-administrator password:
a-z A-Z 0-9 ! ? # $ % & ( ) * + , - . / : ; = [] | { } ^ _
Tip
Choose a password that is as long as possible. The Behnke Station rates the entered password and, if the password is too simple, indicates this below the input field with the message The current password is very insecure.
2.2 Saving the Password
- Enter the new password in the option Sub-administrator password
- Click to save the configuration
3. Configuring the Sub-Administrator's Permissions
The sub-administrator's permissions can be configured in detail: individual areas of the configuration can be fully enabled or blocked; depending on the area, the functions available within it can additionally be individually restricted or enabled.
3.1. Meaning of the Permission Values
Each area is authorized via a selection field. Depending on the area, either two or three values are available:
| Value | Status indicator | Meaning |
|---|---|---|
| no | red dot | The sub-administrator has no access to the area. The area is not displayed to them. |
| partially | yellow dot | The sub-administrator has access to some of the settings in the area. |
| yes | green dot | The sub-administrator has access to all settings in the area. |
- To the left of the selection field, a colored dot shows the currently set value
- Clicking the dot switches the value of the area directly (as an alternative to the selection field)
Important
When assigning rights, denying takes precedence over allowing. If one setting allows access and another denies it, access is not possible.
3.1 Areas Marked with x
To allow a complete assignment of rights, areas that are hidden due to the current configuration or missing hardware are also displayed. The areas concerned are marked with the symbol x.
You can already assign rights to such areas now. Which areas are marked depends on the hardware variant and the set operating mode of the Behnke Station and therefore differs from device to device.
3.2 Areas / Functions
The list Areas / Functions corresponds to the sidebar of the configuration. The following table lists all areas in the order in which they appear in the web interface:
| Area | Possible values |
|---|---|
| Basic configuration | no, yes |
| Global settings | no, yes |
| General | no, partially, yes |
| Network | no, partially, yes |
| Analog phone | no, yes |
| SIP phone | no, partially, yes |
| IP intercom | no, partially, yes |
| Camera | no, partially, yes |
| Display | no, partially, yes |
| Connection | no, partially, yes |
| Keys | no, yes |
| Handset | no, yes |
| Keypad | no, partially, yes |
| Phone book | no, partially, yes |
| Relays | no, partially, yes |
| Card reader | no, partially, yes |
| Triggers | no, partially, yes |
| Acoustics | no, yes |
| Diagnostics | no, partially, yes |
| System | no, partially, yes |
| ControlCenter | no, yes |
Note
The areas Sub-administration and Administrator password are not included in the list. A sub-administrator fundamentally has no access to these two settings and therefore cannot assign themselves any further rights.
Special Feature of the Basic configuration Area
If the sub-administrator is granted access to the Basic configuration area, they will find the most important settings of the other areas on one page there. The settings of areas or functions to which they have no access are hidden.
In addition, the sub-administrator is only shown warnings and configuration problems that concern settings to which they have access.
Note
As a result, the device may be shown to the sub-administrator as "generally ready for operation" while further warnings and configuration problems appear when logging in as administrator.
Special Feature of the IP intercom Area
If the device is used as an IP intercom and the sub-administrator is granted access to the IP intercom area, they can access other devices of the intercom system via the topology view only if a sub-administrator with the same sub-administrator password and corresponding permissions is configured in the device concerned.
3.3. Functionalities
Independently of the areas of the configuration, the list Functionalities specifies which functions the sub-administrator may use.
| Functionality | Possible values | Meaning |
|---|---|---|
| Door opening as sub-administrator | no, yes | Grants or revokes the sub-administrator's permission to open the door via the web interface. |
4. Saving the Permissions
- Set the areas and functionalities to the desired values
- Click to save the configuration
- Log out via Log out and log in again with the sub-administrator password to check the assigned rights
5. FAQ
Note
An area is marked with x — can I still authorize it?
Yes. The marking merely means that the area is currently hidden due to the current configuration or missing hardware. Assigning rights is still possible and takes effect as soon as the area becomes available.
Note
The sub-administrator does not see an area although I set it to "yes"
Check whether the area is available at all in the configuration of the Behnke Station (in the list it is then marked with x). Also note that denying takes precedence over allowing: if another setting denies access, the area is not accessible despite the permission.
Note
Can a sub-administrator change the administrator password or give themselves further rights?
No. The sub-administrator has no access to the sub-administration or to the administrator password.
Note
Where do I set the sub-administrator password?
In the same section Sub-administration, in the option Sub-administrator password. By default it is subadmin. The procedure is described on the page Changing the Administrator Password of the Behnke StationThis page was last checked against version 6.56; the current version is 6.33. This notice is generated automatically and was not written by an editor..