The GUI implements a flexible role-based model, allowing an administrator to create new user accounts with access to specific interface sections and defined permission levels. A new user can either be assigned a previously created role or a new role can be created in advance.

1. Log into the interface with administrator permissions.
2. Go to the "Users" section through the top menu of the GUI.
   Click "+" above the user table to add a new user.
   
3. Fill in all the user’s details, assign them a role, and set a password. Save the username and password, as you will need to share them with the user!
   After filling in the details, do not forget to click the "Save" button.
   
   User information can be edited at any time, including role changes.

Navigate to the "Roles" section through the top menu of the GUI.
Click "+" above the roles table to add a new role

1. Specify a name for the created role. After this, you can configure access to specific sections.
2. Select the necessary sections, and configure access based on the intended purpose: for administrator — read and write permissions, for regular user — read-only access.
3. If the new role is similar to an existing configured role and only minor adjustments are needed, you can use the "Copy Role" button above the roles table, then proceed with edits.
   
   Each role must have the sections of the interface accessible to the user selected.

There are two types of roles available for a company employee: with access to FilterUI and with access to the operator GUI for viewing statistics.
Since these are two separate roles for different interfaces, separate users should be created for each, assigning one of the following roles to each.

For working with FilterUI, read and write access is required in sections with codes starting with the "url" prefix:

For working with QoE statistics in the operator GUI, read and write access to the "qoeanalytics" section and read access to its subsections is required.
The employee will have access to statistics for all clients.

For clients, a role should be created that will allow them to view only their channel statistics in the operator GUI.

1. Click the gear icon to the right of the "QoE Analytics" (qoeanalytics) section.
2. Enable the "Channel Numbers" setting and specify the name of the client's channel. Apply the settings.
   
3. Grant read and write access to the "qoeanalytics" section and read access to the subsections the client needs.
   Write access is needed for the client to use filters in QoE reports.
   The subsections will be the same as for the employee in the operator GUI, but with the channel setting, the client will only see their own statistics.

To apply the "Subscriber CIDRs" filter, the IP should be entered in the IP/32 format: