Administration¶
Reference — Overview: customer account and licence portal, system administration of the desktop app, Settings dialog
Since version 2.0, the administration of Herzog CAB is split between two places:
- The customer account in the licence portal — modules, seats, computers, users and passwords. It applies to the desktop app and the web app and is maintained in the browser.
- The System administration of the desktop app (bottom section of the left navigation) — role assignment per workspace, profiles, storage location and company master data; for dongle installations also the local user accounts and sign-in via Microsoft or the company network. In addition, there is the Settings dialog under File > Settings with language, appearance, Designer defaults, licence, cloud and web server.
The administration of the web app (company, media, roles, import) is located in its user menu — see Web app.
-
Customer account and licence portal
Modules and seats, signed-in computers, inviting users, requesting licences, password, second factor and name.
-
Licence and cloud (Settings)
Licence status in the desktop app, offline lease, signing out and the cloud upload of the workspace folder to the web app.
System administration of the desktop app¶
Visibility depends on your permissions
The System administration group only appears in the navigation if your user account has at least one of the administration permissions. Even within the group, you only see the entries you are authorized for — a user with the Manage company data permission, for example, only sees Company, but not Users or Roles. The available permissions are explained in Roles and permissions.
| Entry in the navigation | Required permission |
|---|---|
| Users | Manage users |
| Roles | Manage roles |
| Profiles | Workspace settings |
| Storage location | Workspace settings |
| Company | Manage company data |
| Authentication | Manage users |
The areas at a glance¶
-
Signing in and out
The sign-in window: account users, local account, Sign in with Microsoft, account lockout and profile selection after login.
-
Users
Take over users from the customer account and assign them to workspaces; for dongle installations, create local accounts, import from Microsoft Entra or LDAP and reset passwords.
-
Roles and permissions
The permission system: supplied standard roles, individual permissions and custom roles.
-
Authentication
Dongle installations only: set up sign-in via Microsoft Entra ID or LDAP / Active Directory — with group-to-role mapping.
-
My profile
Your own account: profile picture, display name, email, changing your password and signing out.
-
Profiles (workspaces)
Run several clients or test/production environments, define the workspace folder, switch profiles.
-
Storage location
Where are the central user data and the active workspace stored? Locally or on the network drive — this is where you see and change it.
-
Company
Maintain company master data and logo for letterhead and print templates.
-
Settings (dialog)
The dialog under File > Settings: language, font size, design, privacy, storage locations, Designer defaults, legacy data import, licence and cloud, web server.
Typical tasks¶
- Setting up users and roles — the complete procedure "Setting up users and permissions for a plant", for the account model and dongle installations.
- Bringing data from the desktop to the web app — cloud upload or ZIP import.