The Admin Panel is a key feature that allows authorized DragOnce users to adjust system settings. Access and configuration rights vary depending on the user's assigned role.
User Account Settings stores all users’ status, user details, passwords and groupings under the same subscriber. Any settings here are subscriber-based, meaning that any changes to a user/group will be applied to all Apps, Circulars and the Messenger under this subscriber. Some sections may not be applicable to customers who use third-party authentication.
Only Root Administrator and HR can access the Admin Panel. To enter the User List in the Admin Panel, mouse over the Admin Panel Logo on the top right corner of the DragOnce web portal and click ‘Go to Admin Panel’.
You will enter the User List. This is the view from the user type as a Root Administrator.
Below are the meanings of the controls on the User List:
1
New User
Add a new user account
2
Import User
Import users in bulk from an Excel spreadsheet
3
Export User
Export users in bulk from an Excel spreadsheet
4
Update User
Update users in bulk from an Excel spreadsheet
5
User Type Lists
Filter between different user types and the number of users of that type
6
Filtering Tools
Filter for user details and other criterions
7
User Info
Including User Icon, Name, Title and Description
8
Functions
Showing functions that are active for the user
9
Allow Access
Showing access permission of the user through different platforms
10
User Type
Showing the User Type of the user
11
User Status
Showing the current status of the user and change between Active or SuspendedAdd a new user account
12
Delete User
Delete an existing user
13
Retrieve User Roles
Get an excel report titled “Runtime User Role Summary” of selected users’ information
** Users with different user types may see less functions. For details, please refer to ‘1.6 User Type’s Permission’
When you add a staff of any type or a Guest, you have to fill in information for him/her. Note that the login password is case sensitive.
Make sure that you enter the correct Email or Credentials for the new user because this field is unique and unchangeable after the user is created. Login email should be valid to receive a verification link from the system and receive a reset login password when needed. Each email address can only be registered once under a subscriber.
1
User Icon
Upload or delete User Icon here
2
User Name and Title
Enter User Name and Job Title for the user
3
User Account
A unique and unchangeable identifier for the user
4
Contact Email
The main email address to receive email from the platform
5
User Information
More information for the user account
6
User Type
Define the user type of the user including Root Administrator, HR, Normal User and Guest
7
User Relationship
Define the relationships between users when necessary. This info could be retrieved in your form.
8
App Management
Control access to the App Management page for different environments
9
Group Management
Control access to the Group Management page
10
Subscriber Log Access
Control access to the log views for HR users
11
Delegation
Control whether the account will be delegated others
12
Allow Access
Control the access permission of the user through different platforms
After filling in the information, you may add the new user into existing groups. Click the group(s) that you want this new user to enter.
After selecting the group(s), click ‘Create on the bottom of the page.
You can add multiple users with one action by importing user data from an Excel spreadsheet to the system.
A sample Excel spreadsheet can be downloaded so you can input the user information accordingly.
The columns with a red asterisk (*), i.e. user name, login email, password and user type are required fields.
After importing the data, you need to map a corresponding field in User Settings to each column in the spreadsheet uploaded. Again, the columns with a red asterisk (*), i.e. user name, login email, password and user type, must be mapped.
There are 2 kinds of user status, Active or Suspended. An active user can login DragOnce on web or mobile version and have permission according to the settings in Admin Panel. While a suspended user cannot login to the platform at all.
You can change a user’s status on the User List. A new user has a default status as ‘Active’. To suspend a user, click on the status button Active to turn it off Suspended.
Click a username to view and update the user details.
In the top area, you can change the user’s personal particulars. After changing, click ‘Apply’ on the bottom right area.
If you want to change the Group info of the user, you could scroll down in the user details. Changes will be applied instantly.
In the bottom of the user details, you can change the user’s password by three methods. (See more: Appendix)
You can also see the linked mobile devices to this user. On the left, you will see the name of the device and the last access time it was used to login with this user using the DragOnce Mobile App. If you click Unlink Button under ‘Unlink’, the system will log this user out from the DragOnce Mobile App on the corresponding device.
Normal Users and Guests are not allowed to access the Admin Panel. Difference in user types’ permission for Root Administrator and HR are shown as follows:
Add User
Yes
Yes
No
Delete User
Yes
No
No
Change Root Administrator User Password
Yes
No
No
Change HR / Normal User / Guest User Password
Yes
Yes
No
Assign / Remove Root Administrator User Type
Yes
No
No
Assign / Remove HR / Normal User / Guest Type
Yes
Yes
No
Activate / Suspend Root Administrator User Status
Yes
No
No
Activate / Suspend HR / Normal User / Guest Status
Yes
Yes
No
Assign / Remove App Management Permission
Yes
No
No
Assign / Remove Subscriber Log Access Permission
Yes
No
No
Change any Account Settings not specified above
Yes
Yes
No
Access Messenger Settings
Yes
Yes
No
Access Circular Settings
Yes
No
No
Change Logo in Messenger and web portal
Yes
No
No
Access Shared Resources List
Yes
Yes
No
Access any Subscriber Settings not specified above
Yes
No
No
View User Account & Group Log
Yes
Depends on Log Access
No
View Log In/Out Time Log
Yes
Depends on Log Access
No
All users are allowed to change the direct line number, mobile phone number, contact email, delegation and time zone of their own, regardless of their user role in System Settings. To do so, on the DragOnce web portal, mouseover your profile icon on the top right corner. Choose ‘Account Settings’.
After you have finished, click ‘Submit’.
All users are allowed to change the password of their own, regardless of their user role in System Settings. To do so, on the DragOnce web portal, mouseover your profile icon on the top right corner. Choose ‘Change Password’.
After you have finished, click ‘Submit’.
Group Settings store group information and user grouping hierarchy. It is helpful to group related users so they can be selected as a group quickly in ‘user and group’ picker. These settings are subscriber-based, meaning that any changes in the settings apply to all Apps, Circulars and the Messenger of the same subscriber.
Only Root Administrator and HR staff can login to the Admin Panel. To enter User Settings in Admin Panel, mouse over the setting logo on the top right corner of the DragOnce web portal and click ‘Go to Admin Panel’.
Select ‘Groups’ under ‘User Account’ section. You will see the Group List.
Below are the meanings of the controls on the Group List:
Number of Group Members
Click to view and edit group name, description and tag
Click to view and edit group members in hierarchy view
Group tags
Clear Group Members
Delete
View the group list in blocks view or hierarchy view
If you want to add a new group, click ‘+ Add Group’. You need to enter a group name, the group description and tag. Group name is marked with a red asterisk (*), so it is a required field. Description and Tag are for identification and search purposes. All fields are editable after the group is created. After you have finished, click ‘Save’.
When you are viewing the group list in hierarchy view, you can add users or groups to or unlink them from the groups.
In the hierarchy view, when you see a arrow beside a group name, it means this group is expandable. Click on the group to view the users and groups that it contains.
The items that a group contains is called the group’s subset, while the mother group is called the affiliated group’s superset. In the hierarchy view, the column on the right is the subset of that on the left. The column on the left is the superset of that on the right.
Here is a sample which shows that ‘Finance Dept’ is a large group that contains ‘Financial Manager’ (which is a group) and ‘Finance (Staff)’ (which is a user). ‘Financial Manager’ is a smaller group that contains ‘Finance (Manager)’.
Below are the meaning of the buttons and symbols in this example:
1
Click to add user or group into the ‘Finance Dept’ group
2
Click to add user or group into the ‘Financial Manager’ group.
3
Click to remove ‘Financial Manager’ group from the ‘Finance Dept’ group. Note that clicking this button won’t remove ‘Finance (Manager)’ from the ‘Financial Manager’ group.
4
Click to remove ‘Finance (Manager)’ from the ‘Financial Manager’ group.
5
This symbol indicates that ‘Financial Manager’ is a group, not a user.
6
This symbol indicates that ‘Finance (Staff)’ is a user, not a group.
When the "Retrieve User Roles" button is clicked, users can choose the relevant staff members and download an Excel report named "Runtime User Role Summary," which contains the selected users' details.
Chat rooms are created by users in the Instant Messenger when they have created an announcement group, group chat, or started a conversation with another user. Root Administrator and HR have the right to manage all created chat rooms listed in ‘Chat Room Management’ in the Admin Panel.
All chat rooms and their corresponding information are shown in the following columns:
Chat Room Name
For Announcement and Group Chat, the name is given by chat room admin when the group is created.
For One to One Chat, the name is formed by the 2 involved users’ names.
Type
Announcement / Group Chat / One to One Chat.
Announcement is a group of a large number of members who usually receive announcement from staff uni-directionally.
Group Chat is a group of 3 or more members.
One to One Chat is a 2-user conversation chat room.
Last Active Time
The time when the last user sent message in the chat room.
Create Datetime
The time when the chat room admin created the chat room.
Data Size
The size of data sent in the chat room in bytes.
File Size
The size of files sent in the chat room in bytes.
You can filter the chat rooms by these columns in ‘Chat Room Management’.
The ‘Chat Room Management’ is divided into two parts: ‘All Active Chat Room’ and ‘Chat Room Archive’. When an active chat room is deleted by the chat room admin through DragOnce Mobile App, the chat room will be moved to ‘Chat Room Archive’ automatically.
Users cannot delete one to one chat room themselves. That’s why you do not see any one to one chat room in ‘Chat Room Archive’. One to one chat rooms can only be deleted by Root Administrators/HRC in the ‘All Active Chat Room’ page.
When you click on a chat room name which has multiple users, the chat room details pop up.
Management activities you can do here include:
1
Click to change chat room name
2
Click to upload a chat room group icon
3
Select who is allowed to send message in this chat room (All users in the chat room / Staff only (including Root Administrator, HR and Normal User) / Chat Room Admin Only / None)
4
Add user to the chat room
5
Turn on or off to add/remove a user’s admin role in the chat room
6
Remove a user from the chat room
On the active chat room list, if you click the delete button on the row of a chat room, it will be permanently deleted and cannot be viewed or recovered. It is different from deleting a chat room by the chat room admin on Mobile App, which only moves the active chat room to archived chat room.
When you click on the chat room name, you can view the chat room details. But you cannot manage the chat room when it is inactive. You can reactivate the chat room by clicking the reactivate button on the row of a chat room. Reactivated chat rooms will be moved back to ‘All Active Chat Room’.
Circular may not be applicable to customers without subscription.
Root Administrator can configure settings of the Circular function. Click ‘General’ under ‘Circular Settings’ in the Admin Panel to configure the settings. Remember to press ‘Save’ after making changes.
Below are the meaning of the items on the Circular General Settings:
Time Zone
You can choose the Circular time zone. The time zone settings will affect the date and time you see and save in Circular
Circular Admin List
The user picked here will be able to create and publish circulars
Need Password to Reply Circular
If ‘Yes’ is chosen, user will need password to reply circular
Scheduled Delivery Time
Scheduled circulars will be distributed according to the time set here
Root administrator can set users or groups to become observers. Observers can read the replies of their corresponding Recipients only. Users and groups can also be selected as Recipients.
Company logo is used in two locations:
Location 1: Top left corner of the DragOnce web portal for your subscriber
Location 2: Top bar of the DragOnce Mobile App Instant Messenger
For Root Administrator, after entering the Admin Panel, click ‘Logo’ under ‘Subscriber Settings’. You can refer to the pictures below.
For Root Admin
To upload or edit the logo, mouse over the ‘Logo’ under ‘Upload Image’. Click ‘+’.
The logo uploaded must be in a format of JPG or PNG images of height 100 pixels and width 50 - 500 pixels. Please use transparent background for best results.
Resources are managed by Root Administrator and HR. It is shared to all users under the same subscriber.
To manage resources, after entering the Admin Panel, click ‘Shared Resources’.
In this mode, files can be uploaded and shared to all users under the same subscriber.
Below are the meanings of the controls in this page:
1
Click to upload new files.
2
Click to reorder the files on the resources list. After entering the reorder page, drag the arrow button up and down to reorder the files.
3
Turn file status to active or suspended. Active files are accessible by users to view or download. Suspended files are invisible on the resources list on Mobile App. A newly uploaded file is default as suspended.
4
Different icons represent different file type. Please refer to the table below.
5
Click to edit the display file name.
6
Click to download the file from DragOnce web portal.
7
Click to delete the file on DragOnce web portal permanently.
8
File upload time.
9
File size.
File Type
There is no limit on file type for uploading files. Here are the icons representing different file types:
Excel
Image
Word
Powerpoint
Others
Users will be able to view and download the files by tapping ‘More’ on the bottom right corner in the DragOnce Mobile App and clicking ‘Resources’.
Root Administrator can assign an environment role and create a testing environment. Click ‘Environments’ under ‘Subscriber’ in the Admin Panel to configure the settings.
Developing environment is used for application building. All ready-to-use applications should be deployed to production environment. Data in each environment are independent. Multiple testing environment can be created for testing purpose.
Below are the meanings of the controls on the environments setting page:
Environment Details
Click to assign environment user role
Testing Users on Mobile
Click to select users that can test applications of this environment in DragOnce mobile app
Delete Environment
Click to delete the environment (Only applicable for testing environments)
For the permission of different Environment Roles, please refer to the document ‘Design Time User Role Permission Model’.
Root Administrator can click ‘SMTP’ under ‘Subscriber’ in the Admin Panel to configure SMTP related settings. This function is disabled by default. It can be enabled upon request.
Root administrator can set up Master Key for Data Encryption and view its creation and update log. Click ‘Data Encryption’ under ‘Subscriber’ in the Admin Panel to configure the settings. Remember to press ‘Save’ after filling in the Master Key information.
Master Key is used for encrypting widgets that enabled data encryption. After a Master Key is created, data encryption function will be available for Input Boxes in form. Once data encryption is enabled for an input box, some system functions will be restricted, such as Record Filtering and Sorting. Existing records will NOT be encrypted in the database unless they are saved again. Encrypted data CANNOT be decrypted if this function is disabled in the Widget Property Settings of an input box.
Additional Reminders:
Original Master Key is needed if you want to update an existing Master Key.
Make sure you hold a copy of the entered Master Key in a safe place for later use. Recovering Master Key require additional technical support. Service charge applies.
Master Key should contain 8 to 32 characters. The following characters are allowed:
-A-Z
-a-z
-0-9
-~!@#$%^&*_+-=,.
Master Key can only be updated once in an hour
Root Administrator can set up Password Policy that users must follow to make up passwords for new accounts or when reset existing passwords.
Below are settings for building up the rules for platform password policy:
Change Password Restriction
Restrict users of selected User Type(s) to change their password
Additional Restriction
Restrict particular user(s) to change their password
Password Expiration Days
Number of days a password will expire after. If not specified the password will never expire.
Password Retry Count
Number of retry allowed after a failed login before the account is locked for too many failed attempts. If not specified, users can retry login for unlimited times.
Contain Lowercase Letters
The password must contain at least one lowercase alphabetical character (a-z)
Contain Upperrcase Letters
The password must contain at least one uppercase alphabetic character (A-Z)
Contain Numbers
The password must contain at least one numeric character (0-9)
Contain Symbols
The password must contain at least one special character (~`!@#$%^&*()-=_+[]\{}|;’:”<>,.?/)
Fulfill At Least X of the Above Criteria
The password must fulfill the specified number of enabled rules
Contain At Least X Characters
The password must not be shorter than the specified number of characters
Reuse Previous X Passwords
Do not allow reusing the previous X historical password as the new password
Use Weak Passwords
System will compare the password with an internal library, and reject those that are listed as commonly used, oversimplified or found in previous breach corpuses
Repeat the Same Characters for X Times
Do not allow using a character more than X times in the password
Contain X or more Sequential Characters
Do not allow sequential combination of X characters in the password
e.g. when set to 3, combinations like abc, mno, 123 or 678 will not be allowed
Use Contents from User Info
Do not allow any content of user info e.g. user name in the password
Root administrator can configure settings of run time language, time zone and restriction of account delegation. Click ‘Settings’ under ‘Subscriber’ in the Admin Panel to configure the settings. Remember to press ‘Save’ after making any changes.
Below are the meanings of the items in the General and Password part:
Runtime Language
Select run time language (English or Simplified Chinese)
Restrict Account Delegation
Remove Account Delegation function for selected User Type(s), previous delegation settings will be removed
Default Time Zone
User time zone, environment time zone and system time zone will follow this time zone by default
By default, Normal User are able to view the list and information of all staff and Guests while Guests can view those of all staff only. Note that since a Guest cannot see other Guests on the contact list, two Guests are not able to create one to one chat room.
Last seen & read info in one to one and group chat rooms are defaulted as available to all.
On top of this, you can restrict the limitation to higher level:
Show All Staff
Show the list, description and title of all staff in the company to the guest (Default)
Show Related Staff Only
Only show the list, description and title of related staff, i.e. staff in the same group with the guest
Show Specific Staff Only
Only show the list, description and title of specific staff, i.e. staff in the same group with the guest
Show All Guests
Show the list, description, title, direct line, mobile phone number, staff ID and contact email of all staff and guests to the staff (Default)
Show Related Guests Only
Only show the list, description, title, direct line, mobile phone number, staff ID and contact email of all staff and related guests, i.e. guests in the same group with the staff
Available to Staff and Guests
Show last seen & read information in one to one and group chat room to both staff and guests (But note that guests are still not allowed to see last seen & read information in announcement chat room)
Available to Staff Only
Only show last seen & read information to staff
Root administrator can view the log about editing and creating Users and Groups. HR can be granted the access to view this log by setting in Staff Details - Subscriber Log Access. Click ‘User Account & Group’ under ‘Log’ in the Admin Panel to view this log page.
Root administrator can view the log in/out time log of all users. HR can be granted the access to view the log in/out time log of all users by setting in Staff Details - Subscriber Log Access. Click ‘Access Log’ under ‘Log’ in the Admin Panel to view this log page.
Admins can set a password for an user account using the Set a Password method.
For example, select Set a Password from the Method options under Password in User Account Settings, and then input the preferred password under New Password and Confirm Password.
Admins may click the Visibility Logo to make the password inputs visible.
The password input should follow the two rules.
1
Contains at least 6 Characters
2
Does Not Repeat the Same Character for 2 Times
Admins can allow the system to generate a password for an user account using the Generate a Password method.
For example, select Generate a Password from the Method options under Password in User Account Settings and the system will automatically generate a password for the user account.
Admins may click the Visibility Logo to make the password generated visible.
The password generation will follow the seven requirements.
1
Exactly 16 characters
2
No more than 2 consecutive letters, e.g. not allowing aBc, cba, zab, 123 and etc
3
No more than 2 repetitive letters, e.g. not allowing aAa, 111 and etc
4
At least 1 small letter
5
At least 1 capital letter
6
At least 1 numeric characters
7
At least 1 symbol from “!@#$%&”
Admins may click the Re-generate Button to regenerate the password or click the Copy Button to copy the password generated.
Admins can allow the system to ask the user to set their own password using the Send Welcome Email method.
For example, select Send Welcome Email from the Method options under Password in User Account Settings. The system will then send a welcome email to the User Account Email and Contact Email after creating the user account, prompting the user to set their own password.
The password should adhere to the same rules as those set by the admins.
The runtime display is shown below:
Runtime (External)
Admins can reset the password of an user account using the Reset a Password method.
For example, on a created user account, select Reset a Password from the Method options under Password in User Account Settings, and then input the preferred password under New Password and Confirm Password.
Admins may click the Visibility Logo to make the password inputs visible.
The password input should follow the two rules.
1
Contains at least 6 Characters
2
Does Not Repeat the Same Character for 2 Times
Admins can allow the system to generate a password of an user account with the Generate a Password method.
For example, on a created user account, select Generate a Password from the Method options under Password in User Account Settings and the system will automatically generate a password for the user account.
Admins may click the Visibility Logo to make the password generated visible.
The password generation will follow the seven requirements.
1
Exactly 16 characters
2
No more than 2 consecutive letters, e.g. not allowing aBc, cba, zab, 123 and etc
3
No more than 2 repetitive letters, e.g. not allowing aAa, 111 and etc
4
At least 1 small letter
5
At least 1 capital letter
6
At least 1 numeric characters
7
At least 1 symbol from “!@#$%&”
Admins may click the Re-generate Button to regenerate the password or click the Copy Button to copy the password generated.
Admins can allow the system to ask the user to reset their own password with the Send Reset Password Email method.
For example, select Send Reset Password Email from the Method options under Password in User Account Settings. The system will then send a reset password email to the User Account Email or Contact Email after confirmation, prompting the user to set their own password.
Admins may enable the Overwrite the existing password and revoke the tokens option to replace the password of the user with a system-generated password and all tokens and linked mobile devices will be revoked for the user account after sending the email.
The password should adhere to the same rules as those set by the admins.
The password should adhere to the same rules as those set by the admins.
Email sent to:
1
Email Format
N/A
User Account Email
2
Non-Email Format
N/A
Contact Email
3
Non-Email Format
N/A
Error
4
Email Format
Email Format; same as User Account Email
Only send one email to User Account Email
5
Email Format
Email Format; different with User Account Email
Both User Account Email and Contact Email
The runtime display is shown below:
Runtime (External)