Web Manager permissions

In principle, the Web Manager uses a role-based authorization mechanism. There are four different roles:

Super Administrator
Administrator
Manager
Viewer
None

For each role, app permissions are defined. These permission define the actions that a user is allowed to do within app.

For each user, the role for each app can be defined separately. To ease the configuration for system with lots of users, this assignment can also be done using groups. This means, for each group the roles for each app can be defined. Thus, users that belong to a group inherits the roles from the group.

Dashboard

Super Administrator:
- A Super Administrator is allowed to do all settings for users, groups and roles.
  - Exceptions:
    - He or she is not allowed to disable the role "Super Administrator" by his- or herself. In addition, it is not allowed to deactivate his- or herself.
    - A Super Administrator has no valid time range
Administrator, Manager, Viewer:
- He or she only sees his- or herself
- It is only allowed to change the following properties:
  - Full name
  - Description
  - Language
  - Date format
  - Password

Super Administrator and Administrator:
- Trending objects: full access
- Chart objects: full access
Manager:
- Trending objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
- Chart objects: full access
Viewer:
- Trend objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
- Chart objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.

Alarms

Super Administrator and Administrator
- Configuration: full access
- List: full access
Manager
- Configuration: no permissions
- List: full access
Viewer
- Configuration: none
- List: only visualization (Acknowledge, Suppress, Archive actions are not possible)

Scheduler

Super Administrator and Administrator
- full access
Manager
- full access
Viewer
- read-only

Visualization Management

Super Administrator and Administrator
- full access
Manager
- full access
Viewer
- read-only

Explorer

Union permissions from Scheduler, Alarms, Trending

Templates

Super Administrator and Administrator
- full access
Manager
- full access
Viewer
- read-only

Reporting

Administrator
- full access
Manager
- full access except designer
Viewer
- Execute ad-hoc reports
- Execute existing report instances. Changes are not allowed
- No designer
- History

Visualization Runtime

App	Permission	Super Administrator	Administrator	Manager	Viewer
Dashboard (User Management)	Open Users page
	Add user
	View user		own record	own record	own record
	Edit users		own record	own record	own record
	Delete users
	Open Groups page
	Add group
	View group
	Edit group
	Delete group
	Open Apps page
	Assign permissions
Alarms	Open Alarms app
	Open Lists page
	View project tree & alarm lists
	Suppress alarm
	Acknowledge alarm
	Alarm details
	Open Configuration page
	Add alarm object
	Edit alarm object
	Delete alarm object
	Apply template
	Import
	Export
	ETS import
Scheduler	Open Scheduler app
	Open Scheduler page
	View project tree & scheduler objects
	Add scheduler object / folder
	Edit scheduler object / folder
	Delete scheduler object / folder
	Apply template
	Show calendar
	Export
	Import
	ETS import
	Open Holidays page
	Add holiday
	View holidays
	Edit holidays
	Delete holidays
	Import
	Export
Trending	Open Trending app
	View project tree & trending objects
	Add trending object	chart, folder trending	chart, folder	chart, folder
	Edit object	chart, folder trending	chart, folder	chart, folder
	Delete object		chart, folder	chart, folder
	Show chart
	Excel export chart
	Apply template		todo empty list! → disable button	todo empty list! → disable button
	Create template
	Export
	Import
	ETS import
Visualization Management	Open Visualization Management app
	Open Projects page
	View Projects list
	Detete project		todo menu button enabled but no delete → disable button	todo menu button enabled but no delete → disable button
	Deploy project
	Open Devices page
	View device list
	Add device
	Edit device
	Delete device		todo menu button enabled but no delete → disable button	todo menu button enabled but no delete → disable button
	Show connections
	Open visualization
	Open Users page
	View users/device list
	Assign device
	Open Groups page
	View groups/device list
	Assign device
	Open Configurations page
	View configurations
	Add configuration
	Delete configuration		todo menu button enabled but no delete → disable button	todo menu button enabled but no delete → disable button
	LAYER FUNC WS VAR	xxxxxxxxxxxxxxxxxxxxxxxxxxx
Explorer	Open Explorer app
	View project tree
	Add object
	Edit object
	Delete object
	Apply template				todo menu enabled . but empty template list
	Create template
	Show calendar
	Export
	Import
	ETS import
Templates	Open Templates app
	Open Templates page
	View templates
	Add template
	Edit template
	Delete template		todo menu button enabled but no delete → disable button	todo menu button enabled but no delete → disable button
	Export
	Import
	Open Import queue page
Reporting	Open Reporting app
	Open Reporting page
	View project tree & reports
	Add report
	Edit report				only report file type
	Delete report
	Generate report
	Export
	Import
	ETS import
	Open Execute page
	View reports list
	Generate report
	Delete report	only custom report	todo menu button enabled but no delete → disable button	todo menu button enabled but no delete → disable button
	Export reports
	Import reports
	Open Report designer page
	Open History page
	View reports history list
	Download report
	Open Logs page
	View reporting logs list
Diagnosis	Open Diagnosis app
	Open Item tree page
	View item tree
	Open Gateway Manager page
	View gateways
	Open Core Server Logs page
	View logs
	Open Web Manager Logs page
	View logs
Visualization