Accounts
Access Profiles
Access Profiles define what a user can do once authenticated — bandwidth limits, session duration, data quota, VLAN assignment, RADIUS attributes, and more. Every user and voucher must be assigned a profile.
'alt' => 'Dashboard overview', 'caption' => 'The default Kiwire dashboard layout', 'screenshot' => true, 'class' => '', ]) Drop images into: public/assets/img/docs/{page}/{filename} --}}
Image not uploaded yet
public/assets/img/docs/profiles/overview.png
Profile Types
| Type | Description |
|---|---|
time | User gets a fixed amount of session minutes. Login is blocked once time is exhausted. |
quota | User gets a fixed data allowance (bytes). Login blocked when quota is exhausted. |
unlimited | No time or quota limit — useful for corporate accounts or testing. |
Key Settings
| Setting | Description |
|---|---|
| Upload / Download Speed | Rate-limit in kbps or Mbps (e.g., 10M, 512k). Sent as RADIUS attribute to the access point. |
| Simultaneous Use | Maximum concurrent logins allowed on one account (0 = unlimited). Stored in the attribute JSON as control:Simultaneous-Use. |
| Session Timeout | Maximum session duration in seconds before RADIUS forces re-authentication. |
| Idle Timeout | Seconds of inactivity before the session is terminated. |
| Validity | How long the profile grant lasts after first use — in days, hours, or months. |
| Grace Period | Extra days the account stays usable after date_expiry has passed. |
| Quota Limit | Total bytes allowed (combined upload + download). |
| Redirect URL | URL the user is sent to after a successful login (overrides journey setting). |
| Shared Quota | If enabled, concurrent sessions share the same quota pool rather than each counting independently. |
| Auto-Reset Schedule | Cron-like schedule to automatically reset usage counters (e.g., monthly reset for recurring subscribers). |
| RADIUS Attributes | JSON field for additional vendor-specific RADIUS attributes sent to access points. |
| Interim Update Interval | Acct-Interim-Interval — how often (seconds) the AP sends accounting updates. |
| Price | Display/billing price for this profile (informational — not used for automated billing). |
System Profiles
Profiles marked is_system = true are created by the platform and cannot be deleted. They serve as the baseline for new tenant provisioning.
Deleting a profile that still has active users assigned will be blocked. Reassign users first, then delete.
User Count
The grid shows a Users count column — the number of accounts currently assigned to each profile. Click the count to jump to a filtered Users view.
Required Permissions
view-profiles · create-profiles · update-profiles · delete-profiles