Web Manager permissions

The Web Manager uses a role-based authorization mechanism.

There are four different roles: 

• Super Administrator
• Administrator
• Manager
• Viewer

For each role, app permissions are defined. These permission define the actions that a user is allowed to do within app.

For each user, the role for each app can be defined separately. To ease the configuration for system with lots of users, this assignment can also be done using groups. This means, for each group the roles for each app can be defined. Thus, users that belong to a group inherits the roles from the group.

Dashboard

• Super Administrator:
  • A Super Administrator is allowed to do all settings for users, groups and roles.
    • Exceptions: 
      • He or she is not allowed to disable the role "Super Administrator" by his- or herself. In addition, it is not allowed to deactivate his- or herself.
      • A Super Administrator has no valid time range
• Administrator, Manager, Viewer:
  • He or she only sees his- or herself
  • It is only allowed to change the following properties:
    • Full name
    • Description
    • Language
    • Date format
    • Password

Trending

• Super Administrator and Administrator: 
  • Trending objects: full access
  • Chart objects: full access
• Manager:
  • Trending objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
  • Chart objects: full access
• Viewer:
  • Trend objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.
  • Chart objects: read-only i.e. properties are shown. Values can be shown within charts and tables. It is not allowed to create, edit or delete objects.

Alarms

• Super Administrator and Administrator
  • Configuration: full access
  • List: full access
• Manager
  • Configuration: no permissions
  • List: full access
• Viewer
  • Configuration: none
  • List: only visualization (Acknowledge, Suppress, Archive actions are not possible)

Scheduler

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer 
  • read-only

Visualization Management

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer
  • read-only

Explorer

Union permissions from Scheduler, Alarms, Trending

Templates

• Super Administrator and Administrator
  • full access
• Manager
  • full access
• Viewer
  • read-only

Reporting

• Administrator
  • full access
• Manager
  • full access except designer
• Viewer
  • Execute ad-hoc reports
  • Execute existing report instances. Changes are not allowed
  • No designer
  • History

Visualization Runtime

App	Permission	Super Administrator	Administrator	Manager	Viewer
Dashboard (User Management)	Open Users page
	Add user
	View user		own record	own record	own record
	Edit user		own record	own record	own record
	Delete user
	Open Groups page
	Add group
	View group
	Edit group
	Delete group
	Open Apps page
	Assign permissions
Alarms	Open Alarms app
	Open Lists page
	View project tree & alarm lists
	Suppress alarm
	Acknowledge alarm
	Show alarm details
	Open Configuration page
	Add alarm object
	Edit alarm object
	Delete alarm object
	Apply template
	Import
	Export
	ETS import
Scheduler	Open Scheduler app
	Open Scheduler page
	View project tree & scheduler objects
	Add scheduler object
	Edit scheduler object
	Delete scheduler object
	Apply template
	Show calendar
	Export
	Import
	ETS import
	Open Holidays page
	Add holiday
	View holidays
	Edit holidays
	Delete holidays
	Import
	Export
Trending	Open Trending app
	View project tree & trending objects
	Add trending object		only chart, folder	only chart,  folder
	Edit trending object		only chart, folder	chart,  folder
	Delete trending object		only chart, folder	chart,  folder
	Show chart
	Excel export chart
	Apply template
	Create template
	Export
	Import
	ETS import
Visualization Management	Open Visualization Management app
	Open Projects page
	View Projects list
	Detete project					NXABMSSW-2652
	Deploy project
	Open Devices page
	View device list
	Add device
	Edit device
	Delete device					NXABMSSW-2652
	Show connections
	Open visualization
	Open Users page
	View users/device list
	Assign device
	Open Groups page
	View groups/device list
	Assign device
	Open Configurations page
	View configurations
	Add configuration
	Delete configuration					NXABMSSW-2652
	LAYER FUNC WS VAR	xxxxxxxxxxxxxxxxxxxxxxxxxxx
Explorer	Open Explorer app
	View project tree
	Add object
	Edit object
	Delete object
	Apply template
	Create template
	Show calendar
	Export
	Import
	ETS import
Templates	Open Templates app
	Open Templates page
	View templates
	Add template
	Edit template
	Delete template					NXABMSSW-2653
	Export
	Import
	Open Import queue page
Reporting	Open Reporting app
	Open Reporting page
	View project tree & reports
	Add report
	Edit report				only report destination file type
	Delete report
	Generate report
	Export
	Import
	ETS import
	Open Execute page
	View reports list
	Generate report
	Delete report	only custom report	only custom report			NXABMSSW-2654
	Export reports
	Import reports
	Open Report designer page
	Open History page
	View reports history list
	Download report
	Open Logs page
	View reporting logs list
Diagnosis	Open Diagnosis app
	Open Item tree page
	View item tree
	Open Gateway Manager page
	View gateways
	Open Core Server Logs page
	View logs
	Open Web Manager Logs page
	View logs
Visualization