Star on GitHub Register Serial Request Demo
Star GitHub Request Demo Register Serial Serial
Pillars 6 & 7 • Self-Service & RBAC

White-Label Subscriber Portal &
Granular RouterOS RBAC Governance

Slash tier-1 support tickets by empowering ISP subscribers with self-healing 1-click network diagnostics, safe NAT port forwarding, and security presets, governed by a multi-tenant RBAC permission matrix covering all 19 RouterOS user policies.

White-Label

White-Label Customer Self-Service Portal

Provide residential and enterprise ISP clients with a branded portal. Fully customizable with your ISP logo, color scheme, domain name, and support links.

  • ✓ Granular Tab Delegation : Administrators choose which tabs (Diagnostics, NAT, Firewall, Wi-Fi) each customer can see.
  • ✓ Strict tenant isolation: customers only see their assigned CPE router.
Customer Self-Service Portal Dashboard
Inspect High-Res Screen

Subscriber Portal Dashboard: Internet connection health status, uptime counter, external IP, and quick diagnostic triggers.

1-Click Network Diagnostics Results
Inspect High-Res Screen

Automated Triage: Multi-target ping tests (8.8.8.8, 1.1.1.1, Default Gateway) with packet loss and latency breakdown.

Self-Triage

1-Click Automated Network Diagnostics

When subscribers experience connectivity issues, they click one button to run automated ping tests, DNS resolution checks, and gateway reachability checks directly from their router.

  • ✓ Translates complex network state into clear human explanations ("Your Wi-Fi is good, but your ISP gateway is unreachable").
  • ✓ Cut routine support calls: subscribers handle port forwarding, firewall presets, diagnostics, speed tests and tickets themselves.
Delegated NAT

Safe Customer Port Forwarding Management

Subscribers can safely open ports for gaming consoles (PlayStation, Xbox), NAS servers, and security cameras without accessing raw RouterOS firewall settings.

  • ✓ Port Conflict Protection: Prevents subscribers from forwarding management ports (e.g. 80, 443, 22, 8291).
  • ✓ Creates isolated destination NAT firewall rules dynamically via RouterOS API.
Customer Port Forwarding Management
Inspect High-Res Screen

Port Forwarding Console: Table of active customer NAT rules with protocol, source/destination ports, and internal LAN target IP.

Customer Security Presets
Inspect High-Res Screen

Firewall Presets: 1-click toggles for Standard, Gaming, and Strict parental protection modes.

Security

1-Click Security Presets & IP/MAC Blacklist

Subscribers select predefined security profiles without risking firewall lockout:

  • ✓ Standard Mode: Balanced firewall protecting internal LAN from WAN intrusions.
  • ✓ Gaming Mode: Low-latency NAT profile with optimized UPnP handling.
  • ✓ Strict Mode: Enhanced DNS filtering blocking adult and malicious web domains.
Helpdesk

Integrated Customer Support Ticketing

Subscribers can submit support inquiries directly inside the portal. The system automatically attaches recent diagnostic logs and device metadata to the ticket.

  • ✓ Provides NOC support engineers with immediate diagnostic context without asking basic questions.
  • ✓ Full ticket lifecycle tracking (Open, In-Progress, Resolved).
Customer Support Ticket Console
Inspect High-Res Screen

Support Desk: Subscriber ticket overview with creation date, assigned engineer, and status pills.

Granular RBAC Permission Matrix
Inspect High-Res Screen

Permission Matrix Modal: Granular checkbox grid mapping all 19 RouterOS user policies to user groups — api, dude, ftp, local, password, policy, read, reboot, rest-api, romon, sensitive, sniff, ssh, telnet, test, tikapp, web, winbox, write.

Identity & Access Governance

Granular RBAC Permission Profiles & RouterOS Group Linking

Implement strict least-privilege access across internal teams, external contractors, and MSP tenants. Custom permission profiles across all 19 RouterOS user policies automatically synchronized with native MikroTik user groups.

  • ✓ 19 RouterOS User Policies: api, dude, ftp, local, password, policy, read, reboot, rest-api, romon, sensitive, sniff, ssh, telnet, test, tikapp, web, winbox, write — direct mirror of RouterOS permission model.
  • ✓ RouterOS Sync: Permission profiles synchronize directly with device-level RouterOS user group configurations at assignment time.
  • ✓ Multi-Tenant Safe: Isolate MSP customer access, NOC engineer read-only views, and admin full-control via named profiles — no cross-tenant privilege leakage.
Admin User Management
View SCR-0057

— User Management Console with role assignments and last-login tracking.

Add User Modal with RBAC
View SCR-0058

— Add User modal with RBAC profile selector, OTP enforcement, and device assignment.

Permission Profiles Library
View SCR-0059

— Permission Profiles library with named profiles for Admin, NOC Engineer, Read-Only, and MSP Tenant roles.

Customer Centric

Delight Subscribers & Secure Administrative Access

Deploy white-label self-service and RouterOS RBAC governance with MikroWizard.

Request Live Architecture Demo Explore Pricing Plans