
Configure users, roles and permissions
The assignment of roles and permissions is done in GRIP. This Identity and Access Management platform is developed by KPN, specifically designed for Business Users. It enables organizations to securely and efficiently manage access to their applications and services.
To assign roles, you must be an admin of the account. As an administrator, you can add or remove users and configuratie roles and permissions for your services.
No admin yet!
Then ask your administrator to provide you with the admin rights. In case you don't know who is the administrator for your organization is, please contact us.
Are you assigned an admin role?
Let's get started!
Access the User Management section
There are three options to get to the User Management screen.
Log in with MijnKPN
Log in with KPN Things Portal
Log in using the direct link
Log in with MijnKPN
Open MijnKPN
Open MijnKPN via https://mijnkpnzakelijk.kpn.com
Log in with KPN Things Portal
Open the Things Manager tab
Open the KPN Things Portal via https://portal.kpnthings.com/manager or click on the Things Manager tab in the KPN Things Portal
Click on your Company in the menu
Click on User Profiles under Account
Log in using the direct link
Open GRIP
Open GRIP via https://grip-on-it.com/.
Add user
Provide the general information
Fill in the general details of the new user
Select the Send email to set password option to send a password email immediately. This can also be done at a later time, for example after you’ve configured all roles and permissions.
Click the Add User button
"If you are a contact person for operational matters, it is advisable to provide a phone number so that our service desk can reach you when needed.
After adding the user, the next screen opens where you can optionally enter additional information about the user. This information is not required for using your account, but it can be used for your own administration.
Add additional general details (optional)
Add even more information like job title or office location (optional)
Click the Save Changes button
Add Services and Roles
Select Services and Roles
Select the Services and Roles tab
Click on Admin if the user should also be able to manage other users.
Click the Save Changes button
Click the + Assign services and roles button the add services
Select the services and roles the user should be assigned. The example below grants the user permissions to access all features within the KPN IoT solution.
The admin is responsible for assigning the correct permissions to the user. Please note that someone with admin rights can also grant themselves additional permissions.
Services and Roles explained
The below list shows the available roles for services that are used within the KPN IOT solution and describes what levels of access each of the roles gives to the user in KPN Things portal.

This provides the user with an account that grants access to all assigned services.
Admin
Provides full management control over users, including the user's own account.
Provides visibility into the services and roles of other users. Users can be modified, added, or removed.

This provides the user with roles to manage the IoT solution.
Things Creator - Admin
Full management access to the Things Creator tab
Grants access to add, modify, or remove custom device types, decoders, and scripts.
If case only connectivity features are used, this option does not need to be enabled.
Things Creator - Read Only
Read-only access to the Things Creator tab
Grants access to view custom device types, decoders, and scripts.
If case only connectivity features are used, this option does not need to be enabled.
Things Manager - Admin
Full management access to the Things Manager tab
Grants access to add, modify, or remove devices, flows, and destinations, as well as manage connectivity.
Things Manager - Editor
Partial management access to the Things Manager tab
Grants access to add or modify devices, flows, and destinations, as well as manage connectivity. You do not have permission to delete items.
Things Manager - Read Only
Read-only access to the Things Manager tab
Grants access to view devices, flows, and destinations.
Things Support - User
Access to the support pages under the Things Support tab
Grants access to the support pages to view all services related information:
News
Release notes
Documents
Service status
Service level report
Contact info
Please note that in order to receive service emails, the Things Support role must be assigned.

This provides the user with roles to access the KPN Webshop functions.
Forecasting
This enables forecasting when large quantities of a product are expected to be ordered in the future.
This allows reservations to be made for calendar periods to ensure that stock levels of items are taken into account at the time of ordering. This feature is only available to customers with whom forecasting has been agreed. If this is not the case, this role does not need to be selected.
Quatation
This allows for ordering articles according to the contract and request a quotation for items that are not yet included in a contract.
This allows for ordering articles according to the contract and request a non-binding quotation to be requested for a product. The status of orders and the history of previous orders can be viewed.
Read Only
This allows users to view available products and their prices in the webshop.
This allows to view available products and their prices. The status of orders and the history of previous orders can be viewed.
Voucher Manager
This allows discount vouchers to be processed.
This allows discount vouchers to be processed.
Please note that you must have at least the Quotation role assigned to be able to place orders.

This provides the user with access to the MijnKPN Zakelijk service portal. It gives access to the available services.
However, we are very proud of our KPN Things portal and therefore recommend accessing these services through the portal.
Facturen (Invoices)
This allows users to view all invoices in PDF format.
This allows to view all invoices in PDF format that are related to the same KPN Reference Number (KRN).

This provides the user with access to the Self Service Portal.
ICT Manager
This allows users to access the Self Service Portal to register tickets.
This allows to report and track incidents, service requests and view registered tickets from your colleagues.
Last updated
Was this helpful?