Device Function Restrictions

The device function restrictions for base roles are set as indicated below. For custom roles, the settings for the following items can be changed.
IMPORTANT
You can change the device restriction settings for the guest role ([GuestUser]). You cannot change device restriction settings for custom roles (administrator) ([DeviceAdmin] and [NetworkAdmin]).

[Function Category Restriction]

Sets device function restrictions by category.
IMPORTANT
The settings in [Application Restrictions] take preference over the settings here.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
Print Functions
Allowed
Not Allowed
Save Functions (Mail Box/Hold/Memory Media)
Allowed
Not Allowed
Copy Functions
Allowed
Not Allowed
Send Functions/Store on Network
Allowed
Not Allowed
Web Access Function
Allowed
Not Allowed
Utility Function
Allowed
Not Allowed
Others Functions
Allowed
Not Allowed

[Function Category Restriction Details]

Sets detailed restrictions for the device functions set to [Function Category Restriction] and [Application Restrictions] and the device functions that have not yet been set.
NOTE
Depending on your device, some restrictions may not be supported.
Print Functions
Sets restrictions for outputting documents (printing or saving to user inboxes) from computers.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
Print
Allowed
Not Allowed
Color Print
Allowed
Only Allowed with Black and White Printing
1-Sided/2-Sided Printing
No Restrictions
2-Sided Printing Only
Page Layout
No Restrictions
1 on 1 Not Available
1-2 on 1 Not Available
Save to Mail Box
Allowed
Not Allowed
IMPORTANT
Depending on the model of the device, the firmware may have to be upgraded in order to use the Save to Mail Box function. For information on whether the firmware of your device needs upgrading, contact your local authorized Canon dealer.
It may not be necessary to install the AMS Printer Driver Add-in, depending on your environment. For more information, see "Access Management System Configurations."
Save Functions (Mail Box/Memory Media)
Sets restrictions for printing user inbox documents.
IMPORTANT
This item/settings can only restrict the output of the box documents by MEAP application. It cannot restrict the output of the box documents using the functions of anything other than MEAP application. For example, AMS cannot restrict printing documents in the USB memory that is connected to the device.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
Print
Allowed
Not Allowed
Color Print
No Restrictions
Full-Color Printing Not Allowed
Full-Color/Two Colors Printing Not Allowed
Only Allowed with Black and White Printing
1-Sided/2-Sided Printing
No Restrictions
2-Sided Printing Only
Page Layout
No Restrictions
1 on 1 Not Available
1-2 on 1 Not Available
Save Function (Memory Media)
Sets input/output restrictions for documents to save to memory media.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
Memory Media
Allowed
Not Allowed
Scan
Allowed
Not Allowed
Print
Allowed
Not Allowed
Copy Functions
Sets restrictions for printing scanned documents.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
Color Copy
No Restrictions
Full-Color Copying Not Allowed
Full-Color/Two Colors Copying Not Allowed
Only Allowed with Black and White Copying
1-Sided/2-Sided Copying
No Restrictions
2-Sided Copying Only
Page Layout
No Restrictions
1 on 1 Not Available
1-2 on 1 Not Available
Scan Functions
Sets restrictions for the Scan function.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
Scan
Allowed
Not Allowed
Color Scan
Allowed
Not Allowed
Send Functions/Store on Network
Sets restrictions for outputting (sending externally) scanned documents and user inbox documents. For imageRUNNER ADVANCE devices, these restrictions also apply to saving documents to file servers and network storage.
Function Restrictions
[Administrator]
[DeviceAdmin]
[NetworkAdmin]
[PowerUser]
[GeneralUser]
[LimitedUser]
[GuestUser]
E-Mail TX
Allowed
Not Allowed
E-Mail TX (Use [Send to Myself])
Allowed
Not Allowed
I-Fax TX
Allowed
Not Allowed
Fax TX
Allowed
Not Allowed
FTP TX
Allowed
Not Allowed
Windows (SMB) TX
Allowed
Not Allowed
Use [Personal Folder]
Sets output restrictions (output destination :Personal Folder) for scanned documents and user inbox documents.
Allowed
Not Allowed
WebDAV TX
Allowed
Not Allowed
Mail Box TX
Sets restrictions for saving scanned documents to user inboxes.
Allowed
Not Allowed
Specify Address Domain
Allowed
Not Allowed
Use Address Book/Register Storage Location for Network
For imageRUNNER ADVANCE devices, these restrictions also apply to registering/editing/deleting network storage.
For device models installed with User Authentication, this also applies to usage restrictions for the Address Book (Address List management function) provided on the Remote UI.
No Restrictions
Not Allowed
Read-Only
Use Personal Address List
Sets restrictions for using Personal Address List.
Allowed
Not Allowed
Send to New Addresses
Allowed
Not Allowed
Add Device Signature to Sending Files
Allows or prohibits adding of a device signature when sending PDF files.
Added
Not Added
Sending Files Format
Allows or prohibits sending file formats that a device signature cannot be added to.
No Restrictions
Restrictions

[Application Restrictions]

With the Access Management System, you can set restrictions by application ([Application Restrictions]) in addition to setting restrictions by function ([Function Category Restriction] and [Function Category Restriction Details]).
When [Application Restrictions] is set, restrictions are applied according to those settings, but when it is not set, restrictions are applied according to the settings in [Function Category Restriction] and [Function Category Restriction Details] for the function category that the application belongs to. Applications that do not belong to any function categories are restricted according to the settings in [Others Functions] in [Function Category Restriction].
The basic applications belong to the function categories indicated below.
Basic Applications
Category
Web Access
[Web Access Function] category
Copy
[Copy Functions] category
Scan and Send/Fax
[Send Functions/Store on Network] category
Print/Secured Print
[Print Functions] category
Hold
[Save Functions (Mail Box/Hold/Memory Media)] category
Mobile Print
[Print Functions] category
Access Stored Files
[Save Functions (Mail Box/Hold/Memory Media)] category
IMPORTANT
The settings in [Application Restrictions] take preference over the settings in [Function Category Restriction].
Since application restrictions cannot be set for base roles and custom roles (administrator), all applications are restricted according to the settings in [Function Category Restriction] and [Function Category Restriction Details] for the function category the application belongs to.
[Button Restrictions]
You can set usage restrictions for buttons on the [Main Menu] screen and [Quick Menu] screen on models that have User Authentication.
However, since some functions provided by applications are registered in buttons, you cannot use functions set to [Not Allowed] in [Application Restrictions], regardless of whether they are not restricted in [Button Restrictions].
Usage restrictions can be set with the following basic application buttons.
Button/Applet Name
Application Name
Copy
Copy
Fax
Scan and Send
Scan and Send
Scan and Send
Scan and Store
Access Stored Files
Access Stored Files
Access Stored Files
Fax/I-Fax Inbox
Access Stored Files
Secured Print
Secured Print
Web Access
Web Access
Scanner
Scan
IMPORTANT
Since button restrictions cannot be set for base roles and custom roles (administrator), all buttons are restricted according to the settings in [Function Category Restriction] and [Function Category Restriction Details] for the application that the button belongs to.