--- title: "Boss’nX role scope: define the accessible components" description: Define which components a Boss’nX role can access with standing rules by type and location, restrict full access and check the result with an account. canonical: https://wiki.can-nx.com/en/guides/boss-role-scope-rules/ language: en product: Boss’nX audience: - administrateur - installateur context: "Boss’nX supervision: Users → Roles → Edit, Components & Building section of an editable role" --- # Boss’nX role scope: define the accessible components Context: Boss’nX supervision: Users → Roles → Edit, Components & Building section of an editable role The **Components & Building** section of a Boss’nX role defines the components its accounts can access. **Standing rules** automatically grant the components that match their type and location criteria, including those added later. Intended for the administrator or installer authorized to manage roles. The actions allowed on these components are set separately in [Capabilities](https://wiki.can-nx.com/en/guides/boss-role-capabilities/). To allow or deny a precise item, use the [Specific overrides](https://wiki.can-nx.com/en/guides/boss-role-scope-overrides/); a manual deny always takes priority there. ## Open the role’s scope 1. Open the relevant supervision, then **Menu → Users**, **Roles** tab. 2. [Check the role and the associated accounts](https://wiki.can-nx.com/en/guides/boss-roles-consult/), then click **Edit**. 3. Select **Components & Building**. The section is titled **Components & Building scope**. 4. Check that the section is editable. System roles and shared default roles may present it as read-only; in that case, have the administrator check which role to use. ## Switch from full access to targeted rules The **FULL ACCESS · ALL COMPONENTS** banner indicates a rule covering all types, anywhere. **Add rule** is then unavailable. 1. Click **Restrict access**. The role draft changes immediately, without confirmation. 2. Check the remaining rules: targeted rules already present are kept and become useful again. Existing overrides are also kept. 3. Prepare the necessary rules before saving the role. Without a rule or a manual grant, this scope grants no component. As long as you have not saved, **Discard** returns the whole editor to its loaded state. ## Add a standing rule 1. Click **Add rule**. The **New standing rule** window opens. 2. In **Component types**, tick the allowed types. Several types broaden the selection: a component can match one or the other. 3. If needed, use the **Functional groups (quick select)** buttons: they add the types of the chosen groups. You can combine groups and individual types. To allow all types, select neither a type nor a group. 4. In **Where in the building**, choose **Anywhere**, **Specific floors** or **Specific zones**. 5. For floors or zones, [select at least one location](https://wiki.can-nx.com/en/guides/boss-role-scope-locations/). Without a selection, **Add rule** is disabled. 6. Review **Matches … components right now**, then click **Add rule**. 7. The window closes and a card summarizes the chosen types or functions and locations. The role still has to be saved. ### How the criteria combine Type and location add up: a “Lighting on Roof” rule grants the lighting components of that floor, but neither all the roof’s components nor the lighting on other floors. Several rules grant all their matches together; a component does not need to match every rule. A functional group follows the types associated with it. If you do not know its composition, have it checked or explicitly tick the types you want. A rule can be added even if no current component matches: it will cover future components that meet its criteria. Zero matches therefore blocks nothing, unlike the absence of a ticked floor or zone, which prevents confirming the window. ## Edit or remove a rule On the relevant card, click **Edit**. Adjust the criteria in **Edit standing rule**, then click **Save** in the window. This button validates the rule in the draft; the role is then saved with **Save** in the editor’s bottom bar. To close the window without applying the input, use **Cancel** or the **Close** cross. **Remove**, on a card, immediately removes the rule from the draft, without a confirmation window. Review the other rules and the overrides before saving. To recover an unsaved removal, click **Discard**, which restores the whole editor to its loaded state. ## Restore access to all components 1. When access is restricted, click **Add rule**. 2. Leave all types and groups deselected, and choose **Anywhere**. 3. Click **Add rule**. The full access banner reappears and adding other rules becomes unavailable. 4. Targeted rules already present remain displayed, with a warning stating that they are redundant during this full access. 5. Check the overrides: adding this rule does not remove manual denies. ## Save the role 1. Review the rules and overrides, as well as any other sections you changed: saving covers the whole role. 2. Click **Save** in the bottom bar and wait for **Role updated**, then the return to the list. **Discard** restores all sections to their loaded state. Leaving through **Back to roles** with unsaved changes asks you to abandon them; declining to leave keeps your input. ## Check the result 1. Reopen the role to check the saved criteria. 2. Have an account concerned open a new session. 3. Check the expected components, those that must remain inaccessible and the allowed actions. ## Troubleshooting - An expected access is missing: check the supervision, the account’s role, the chosen types and locations, then the denies set on the component and on its parent locations. - **Add rule** is unavailable: the role has full access; first click **Restrict access**. - Saving fails: reload, then check the criteria kept before trying again. If the result remains unexpected, contact support@can-nx.com with the role, the component, its location, the expected access and the checks performed. French labels: **Menu → Utilisateurs → Rôles → Modifier → Composants & Bâtiment**, **Règles permanentes**, **ACCÈS COMPLET · TOUS LES COMPOSANTS**, **Restreindre l'accès**, **Ajouter une règle**, **Nouvelle règle permanente**, **Types de composants**, **Groupes de fonctions (sélection rapide)**, **Où dans le bâtiment**, **Partout**, **Étages spécifiques**, **Zones spécifiques**, **Enregistrer**, **Supprimer**, **Annuler les modifications**, **Rôle mis à jour**.