Web Manager permissions

In principle, the Web Manager uses a role-based authorization mechanism. There are four different roles: 

• Super Administrator
• Administrator
• Manager
• Viewer
• None

For each role, app permissions are defined. These permission define the actions that a user is allowed to do within app.

For each user, the role for each app can be defined separately. To ease the configuration for system with lots of users, this assignment can also be done using groups. This means, for each group the roles for each app can be defined. Thus, users that belong to a group inherits the roles from the group.

Dashboard

• Super Administrator:
  • A Super Administrator is allowed to do all settings for users, groups and roles.
    • Exceptions: 
      • He or she is not allowed to disable the role "Super Administrator" by his- or herself. In addition, it is not allowed to deactivate his- or herself.
      • A Super Administrator has no valid time range
• Administrator, Manager, Viewer:
  • He or she only sees his- or herself
  • It is only allowed to change the following properties:
    • Full name
    • Description
    • Language
    • Date format
    • Password

Trending

• Super Administrator and Administrator: 
  • Trending objects: full access
  • Chart objects: full access
• Manager:
  • Trending objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
  • Chart objects: full access
• Viewer:
  • Trend objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
  • Chart objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.

Alarms

• Super Administrator and Administrator
  • Configuration: full access
  • List: full access
• Manager
  • Configuration: no permissions
  • List: full access
• Viewer
  • Configuration: none
  • List: only visualization (Acknowledge, Suppress, Archive actions are not possible)

Scheduler

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer 
  • read-only

Visualization Management

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer
  • read-only

Explorer

Union permissions from Scheduler, Alarms, Trending

Templates

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer
  • read-only

Reporting

• Administrator
  • full access
• Manager
  • full access except designer
• Viewer
  • Execute ad-hoc reports
  • Execute existing report instances. Changes are not allowed
  • No designer
  • History

Visualization Runtime

App	Permission	Super Administrator	Administrator	Manager	Viewer
Dashboard (User Management)	Open Users page
	Add user
	View user
	Edit users
	Delete users
	Open Groups page
	Add group
	View group
	Edit group
	Delete group
	Open Apps page
	Assign permissions
Alarms	Open Alarms app
	Open Lists page
	View project tree & alarm lists
	Suppress alarm				(x)
	Acknowledge alarm
	Details alarm
	Open Configuration page
	Add alarm
	Edit alarm
	Delete alarm
	Apply template
	Import
	Export
	ETS import
Scheduler	Open Scheduler app
	Open Scheduler page
	View project tree & scheduler objects
	Add scheduler object
	Edit scheduler object
	Delete scheduler object
	Apply template
	Show calendar
	Export
	Import
	ETS import
	Open Holidays page
	Add holiday
	View holidays
	Edit holidays
	Delete holidays
	Import
	Export
Trending	Open Trending app
	View project tree & trending objects
	Add trending object
	Edit object
	Delete object
	Apply template
	Export
	Import
	ETS import
Visualization Management	Open Visualization Management app
	Open Projects page
	View Projects list
	Detete project
	Deploy project
	Open Devices page
	View device list
	Add device
	Edit device
	Delete device
	Show connections
	Open visualization
	Open Users page
	View users/device list
	Assign device
	Open Groups page
	View groups/device list
	Assign device
	Open Configurations page
	View configurations
	Add configuration
	Delete configuration
Explorer	Open Explorer app
	View project tree
	Add object
	Edit object
	Delete object
	Apply template
	Show calendar
	Export
	Import
	ETS import
Templates	Open Templates app
	Open Templates page
	View templates
	Add template
	Edit template
	Delete template
	Export
	Import
	Open Import queue page
Reporting	Open Reporting app
	Open Reporting page
	View project tree & reports
	Add report
	Edit report
	Delete report
	Export
	Import
	ETS import
	Open Execute page
	View reports list
	Execute report
	Export reports
	Import reports
	Open Report designer page
	Open History page
	View reports history list
	Download report
	Open Logs page
	View reporting logs list
Diagnosis	Open Diagnosis app
	Open Item tree page
	View item tree
	Open Gateway Manager page
	View gateways
	Open Core Server Logs page
	View logs
	Open Web Manager Logs page
	View logs
Visualization