Secure Collaboration with Advanced Role‑Based Access Control in IXON Cloud 2

Machine builders strive to extract maximum performance from their equipment, services, and processes—faster, more efficient, and more productive. In this context, collaboration has become essential. By securely sharing data with colleagues, customers, and service engineers, you can continuously optimize your machines. IXON Cloud 2’s sophisticated role‑based access control ensures that collaboration happens safely and efficiently.

Role‑Based Access Control

IXON Cloud 2 builds on the solid foundation of its predecessor, expanding group creation and permission management based on real user feedback. Now you can fine‑tune roles and groups to match your exact operational needs, enabling clear distinctions between customers, partners, and service teams.

Role‑based access control in IXON Cloud

Secure Collaboration with Advanced Role‑Based Access Control in IXON Cloud 2

User Roles

In the new IXON Cloud 2 user‑management system, every user must be assigned a specific role—such as service engineer or machine operator. Administrators can create custom roles with tailored access rights, then assign users to these roles via the Admin app. Role managers also handle group definitions and user invitations.

Access Categories

Access categories let you control which users can view particular machine data and which services they can use—VPN, VNC, HTTP, or WebSockets. For instance, a production dashboard might grant operators HMI panel access, while a maintenance page could provide service engineers VPN and HTTP connectivity.

Groups

Groups provide a flexible structure for granting device access. Define groups based on customer, region, or machine type to streamline permissions across your fleet.

Permissions

IXON Cloud 2 prioritizes security. You can prevent customers from altering advanced settings and restrict partner remote access as needed. Assign categories to users or set permissions at the individual level. For example, block customers from managing pages and cards, while allowing engineers to view audit trails and licenses. Two‑factor authentication can also be enforced to further protect your account.

Once configured, each user sees only the information and controls relevant to their role—eliminating clutter and enhancing focus. This streamlined experience boosts collaboration, protects critical settings, and maximizes machine value without compromising security.