[ITS] Step 1: Adding User Accounts to your BenQ Cloud Services & Whitelisting

5 methods and a step by step guide to help you add user accounts to your BenQ Cloud Services

Step-by-step

  1. Set up your BenQ cloud infrastructure is to create an admin account through our BenQ service portal 
  2. Click on Register BenQ Account fill out the fields and our server will send you an email prompting you to authenticate your user account and create a password. 

    **Frequent practice is to create a new e-mail for your organization Ex. Benqadmin@yourdomain.com. This way you can share this e-mail and password with staff who might assist with managing BenQ boards. You can also add other users as administrators.** 

  3. Now that you have your administrator password, we will need to prepare your organization’s network. This will be done by whitelisting the ports and URLs that BenQ Boards require to contact different servers. Please note that if you enable geo-filtering on your network you will have to whitelist the locations of these servers. This document can be found here: BenQ Board Whitelisting and Server Location
    1. Method 1: manually add users

    2. Method 2: using a .csv template file on a Windows PC

    3. Method 3: adding users via an on-premises Active Directory 
      **This will NOT auto-populate users to our services, users will populate on their first sign in to BenQ services.**
    4. Method 4: adding users via Azure Cloud Active Directory 
      **This can auto-populate your users to our services.**
    5. Method 5: adding users via Google Workspace 
      **This will NOT auto-populate users to our services, users will populate on their first sign in to BenQ services.**
    6. Method 6: adding users via Classlink 
      **This will NOT auto-populate users to our services, users will populate on their first sign in to BenQ services.**

      Below are the BenQ cloud services that available to your users. Before adding our users, we need to understand what giving access to each portion of our cloud services will allow users and administrators to do.   

      IAM will only be accessible to accounts set as administrators. It is used to add and edit users and permissions.  


      A picture containing text

Description automatically generatedX-Sign is our paid Digital signage software. If you are using a BenQ IFP you will not require this service. 

      DMS is used to manage your boards settings from the cloud. Push firmware updates, install applications and see device information. 

      Icon

Description automatically generatedAMS is used by BenQ administrators and end-users and teachers a like. Depending on the roles assigned when adding a user to your BenQ infrastructure the interface will look different when logging in. For accounts set as administrators they will be able to modify how each board allows users to interact with it and associate NFC cards with user accounts. For teachers and end-users that have not been given administrator privileges, they will be able to set up their user interface and personalize their experience through AMS. 

      Broadcast is a service that you can use to remotely push content and messages to the boards. If you wish to learn more about this service, please consult this series of videos. https://www.benq.com/en-us/business/support/products/ifp/x-sign-broadcast/video.html 

 

Method 1: Inviting individual users 

  1. Log into to your admin account through the IAM portion of cloud managment services. Click on Invite.

  2. Enter the email addresses for the user(s) you would like to enroll into BenQ IAM. You can also use an .xlsx file to Bulk invite as well via the
    Bulk invite option.
  3. Users should receive a verification email from BenQ IAM. From there, they'll need to verify their accounts as well as set their passwords.
    1. Verified users
    2. Unverified users   
  4. Confirm the service permissions of your invited users. 

    1. End user and teacher accounts will only need to have access to the AMS portion of BenQ cloud services. This will allow them to have access to their personal settings and also to customize their user interface.

    2. If a user requires access to other services, this can be modified. 

      Figure 1 Teacher and end user access to AMS selected

    3. To give this user administrator privileges, please change the Service Setting drop down. 
      • This will provide them with the same administrative privileges as the main admin.
      • This will also give the user access to all cloud services.

        Figure 2 User has full admin privileges

    Method 2: Bulk Invite of Users to BenQ IAM

    1. Log into to your admin account through the IAM portion of cloud managment services > click Invite > Bulk Invite > Download the .xlsx template > Open the template in Excel and populate the fields with your users' email addresses> Save the .csv file, return to IAM, and Drag and drop the saved the updated .csv file. 

    2. **Please note that this cannot be done from a Mac® device.**

      Once you click on Upload, users will receive an e-mail from our servers prompting them to create a password. They can now sign into our portal by going to the BenQ Account Management System(AMS). While the board is bound to the admin account, users will not be able to log in.

    3. Once imported, users get access to DMS, AMS, and BenQ X-sign Broadcast Cloud services.
      • If you wish to revoke or add permissions, select the check box beside their name > click the pencil icon to edit which services they will have access to. You can also give them administrator privileges through this method.  
      • If you wish to change all user or multiple user permissions, select all users or a group and repeat the previous step.

    As of August 22nd, 2022, you can also group your users and provide entire groups with identical permissions. There are three scenarios in the step-by-step guide for how to use this function. 

    How to group users

    How to set group permission

    How to regulate service permissions for new users by group

     

    c. Method 3: add users via an on-premises Active Directory

    To add users via your Active Directory please follow the steps listed in BenQ IAM Active Directory Integration Guide.  

    (1) Note that users only appear in your repertoire once they have signed into to the BenQ Account Management System (AMS) for the first time once sync has been completed between your Active Directory and BenQ Cloud Services. 

    (2)  Once imported , users get access to BenQ X-Sign Broadcast and AMS cloud services. 
    ●  If you wish to revoke or add permissions, select the check box next to a user’s name > click the pencil icon to edit what services they will have access to. You can also give them administrator privileges through this same method.  
    ● If you wish to change all user or multiple user permissions, select all users or a group and repeat the previous step.

    ● As of August 22nd, 2022, you can also group your users and provide entire groups with identical permissions. There are three scenarios in our step-by-step guide for how to use this function. 

    How to group users

    How to set group permission

    How to regulate service permissions for new users by group

     

    d. Method 4: add users via Azure Cloud Active Directory

    (1) Please follow these instructions to add users via your Azure Cloud Active Directory

    **Please note this is the only method that automatically provision users. Once the process  is complete, you will see your users through IAM.**

    (2) Once imported, users will have access to BenQ X-Sign Broadcast and AMS cloud services. 
    ●  If you wish to revoke or add permissions, select the check box beside a user’s name > click the pencil icon to edit what services they will have access to. You can also give them administrator privileges through this same method. 
    ● If you wish to change all or multiple user permissions, select all users or a group and repeat the previous step.

    ● As of August 22nd, 2022, you can also group your users and provide entire groups with identical permissions. There are three scenarios for step-by-step guides on how to use this function.

    How to group users

    How to set group permission

    How to regulate service permissions for new users by group

     

    e. Method 5: add users via Google Workspace 
    (1) Please follow these instructions to add users via Google Workspace

    **Keep in mind that this will not auto populate users in the list. When users have performed the SSO login for the first time through BenQ AMS, they will show up in the user list.**

    (2) Once imported, users will have access to BenQ X-Sign Broadcast and AMS cloud services.
    ● If you wish to revoke or add permissions, select the check box beside their name > click the pencil icon to edit what services they will have access to. You can also give them administrator privileges through this same method. 
    ● If you wish to change all user or multiple user permissions, select all users or a group and repeat the previous step.

    ● As of August 22nd, 2022, you can also group your users and provide entire groups with identical permissions. There are three scenarios for step-by-step guide on how to use this function.

    How to group users

    How to set group permission

    How to regulate service permissions for new users by group

     

    f. Method 6: add users via Classlink

    (1) Please follow these instructions to add users via Google Workspace

    **Keep in mind that this will not auto populate users in the list. When users have performed the SSO login for the first time through BenQ AMS, they will show up in the user list.**

    (2) Once imported, users will have access to BenQ X-Sign Broadcast and AMS cloud services.
    ● If you wish to revoke or add permissions, select the check box beside their name > click the pencil icon to edit what services they will have access to. You can also give them administrator privileges through this same method. 
    ● If you wish to change all user or multiple user permissions, select all users or a group and repeat the previous step.

    ● As of August 22nd, 2022, you can also group your users and provide entire groups with identical permissions. There are three scenarios for step-by-step guide on how to use this function.

    How to group users

    How to set group permission

    How to regulate service permissions for new users by group

    Tips:

    Once you have completed step 1: add users and whitelist all ports, URLs, and server locations on your network:

    -> You are now ready to install your BenQ boards and set them up to be managed from the cloud.

    -> Please consult step 2: Adding BenQ Boards to the Device Management Solution(DMS)