Web Manager permissions

In principle, the Web Manager uses a role-based authorization mechanism. There are four different roles: 

• Super Administrator
• Administrator
• Manager
• Viewer
• None

For each role, app permissions are defined. These permission define the actions that a user is allowed to do within app.

For each user, the role for each app can be defined separately. To ease the configuration for system with lots of users, this assignment can also be done using groups. This means, for each group the roles for each app can be defined. Thus, users that belong to a group inherits the roles from the group.

Dashboard

• Super Administrator:
  • A Super Administrator is allowed to do all settings for users, groups and roles.
    • Exceptions: 
      • He or she is not allowed to disable the role "Super Administrator" by his- or herself. In addition, it is not allowed to deactivate his- or herself.
      • A Super Administrator has no valid time range
• Administrator, Manager, Viewer:
  • He or she only sees his- or herself
  • It is only allowed to change the following properties:
    • Full name
    • Description
    • Language
    • Date format
    • Password

Trending

• Super Administrator and Administrator: 
  • Trending objects: full access
  • Chart objects: full access
• Manager:
  • Trending objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
  • Chart objects: full access
• Viewer:
  • Trend objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
  • Chart objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.

Alarms

• Super Administrator and Administrator
  • Configuration: full access
  • List: full access
• Manager
  • Configuration: no permissions
  • List: full access
• Viewer
  • Configuration: none
  • List: only visualization (Acknowledge, Suppress, Archive actions are not possible)

Scheduler

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer 
  • read-only

Visualization Management

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer
  • read-only

Explorer

Union permissions from Scheduler, Alarms, Trending

Templates

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer
  • read-only

Reporting

• Administrator
  • full access
• Manager
  • full access except designer
• Viewer
  • Execute ad-hoc reports
  • Execute existing report instances. Changes are not allowed
  • No designer
  • History

Visualization Runtime