Permissions

Abstract

Check out this article and learn more details about the permissions set introduced by the i4connected 5.6 version.

The list of permissions is a predefined set of rights, governing all aspects of the application. The user can either assign a role to an entire category of permissions or chose the effective permissions individually. The built-in permissions table provides information on the relevance of the permission when assigned either globally or at the hierarchy level.

Tip

The Assignment relevance column of below table indicates the level on which the permission takes effect, after the assignment to a role is done, as follows:

Permissions having a Global assignment relevance guard system-wide or administrative actions that require high authority rights.
Permissions having a Hierarchical assignment relevance guard limited hierarchical entities actions that do not require advanced rights or system knowledge.
Permissions having a Privileged assignment relevance guard special actions that require super-user rights.
Permissions having both Global and Hierarchical assignment relevance guard system-wide actions concerning hierarchical entities.
Permissions having both Global and Privileged assignment relevance guard system-wide or administrative actions, that require the special rights of a super-user.

The permission list is composed of built-in permissions and extended permissions.

Built-in permissions

Category	Permission name	Description	Assignment Relevance
System	Manage configuration	Allows managing the system configuration and the global items, such as: Signal types Site types Key Performance Indicators Measure Aggregations Measure Groups Entity variables Device Manufacturers / Models / Types / Versions Translations Weather normalization i4connected global settings, processed under the Edit settings panel Locking Sites, Areas, Organizational Units for delete other general system settings This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global Privileged
	Manage shared filters	Allows saving filter settings as global (shared) filters, as described in The Object Filter article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Manage shared tiles	Allows managing tiles that are shared by all system users, as described in the Tile management article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Manage personal tiles	Allows managing tiles that are available only to the currently logged-in user, as described in the Tile management article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Import (append)	Allows all import operations that offer an append or merge conflict resolution action. These resolution actions are generally non-destructive. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Import (overwrite)	Allows all import operations that offer an overwrite resolution action. These resolution actions are generally destructive (they overwrite existing data) so extra caution is advised. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Manage personal panels	Allows the currently logged-in user to manage his / her personal panels. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Pin shared panels	Allows pinning default panels that are shared by all the system users. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Close shared panels	Allows closing default panels which are shared by all the system users. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
Security	Configure security	Allows configuring roles and permissions. Users having this permission enabled can add, edit, link, and delete roles. For more details, please also visit the User roles article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	Configure privileged security	Allows configuring privileged roles and permissions. Users having this permission enabled can add, edit, link, and delete Privileged roles. Without this permission, Privileged roles will not be visible for further modifications. For more details, please also visit the User roles article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global Privileged
	View users	Allows listing the users to which the current user has a relationship. The user having this permission available will be allowed to view only the users having equal or inferior roles and permissions. For more details about Users management, please also visit the dedicated article. Having this permission set on a global level, allows the user to view all the users to which he/she has a relationship in all hierarchical contexts. Having this permission set on a hierarchical level, allows the user to view all the users to which he/she has a relationship, only on the hierarchical level where the explicit assignment was done.	Global Hierarchical
	View all users	Allows listing all the users in the system. For more details about Users management, please also visit the dedicated article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global Privileged
	Manage user accounts	Allows the following management rights: create new user accounts delete user accounts activate / deactivate user accounts reset other users passwords This permission requires one of the View users / View all user's permissions. For more details about Users management, please also visit the dedicated article. Having this permission set on a global level, the user is allowed to view and manage all the users belonging to a shared hierarchical entity, if the View user's permission is also enabled. If the View all users permission is enabled, the user will be allowed to view all system users, but manage only those belonging to a shared hierarchical entity. Having this permission set on a hierarchical level, the user is allowed to view and manage all the users belonging to a shared hierarchical entity, if the View user's permission is also enabled. If the View all users permission is enabled, the user will be allowed to view all system users, but manage only those belonging to a shared hierarchical entity. Users having privileged rights assigned will be visible to the currently logged-in user, but can only be managed by another privileged user. For more details about the Entity role assignments feature, please also visit the dedicated article.	Global Hierarchical
	Manage users	Allows the following management rights: edit other user's details assign roles (the list of roles depends on the rights of the currently logged in user) assign reports (provided that the user also has report relevant permissions enabled) copy other users rights (the list of displayed users, depends on the rights of the currently logged in user) invite new users to hierarchical entities to which the currently logged-in user has both access and management rights. This permission requires one of the View users / View all user's permissions. For more details about Users management, please also visit the dedicated article. Having this permission set on a global level the user is allowed to view and manage all the users belonging to a shared hierarchical entity if View users permission is also enabled. If the View all users permission is enabled, the user will be allowed to view all system users, but manage only those belonging to a shared hierarchical entity. Having this permission set on a hierarchical level, the user is allowed to view and manage all the users belonging to a shared hierarchical entity, if the View user's permission is also enabled. If the View all users permission is enabled, the user will be allowed to view all system users, but manage only those belonging to a shared hierarchical entity. Users having privileged rights assigned will be visible to the currently logged-in user, but can only be managed by another privileged user. For more details about the Entity role assignments feature, please also visit the dedicated article.	Global Hierarchical
	Change password	Allows a user to change his / her own password. For more details about Users management, please also visit the dedicated article. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	View all user invitations	Allows listing all the invitations in the system. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global Privileged
	Manage role package	Allows creating, editing, and deleting role packages. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
Sites and areas	View sites and areas	Allows viewing sites and areas along with their corresponding calculations (from measure aggregations). This permission needs to be assigned at the hierarchy level. Hence, the user receiving this permission will only be allowed to view the site/area to which he/she was explicitly assigned. This permission has no effect on the user's rights when assigned only at a global level. For more details about the Entity role assignments feature, please also visit the dedicated article.	Hierarchical
	Manage sites and areas	Allows the user to perform the following operations: Create new Sites and Areas Edit accessible Sites and Areas Delete accessible Sites and Areas Move Area function will check if the user performing the operation has management rights on the direct parent Site or Area, before allowing the change. Also, the Move function will check the move destination Site or Area for management permissions, before allowing the change. Import Ewon / Netbiter configuration Having this permission set at a global level, allows the user to manage all sites and areas, for which at least view rights are already available. Having this permission at a hierarchical level, allows the user to manage only the respective sites/areas. For more details about the Entity role assignments feature, please also visit the dedicated article.	Global Hierarchical
	View all sites and areas	Allows viewing sites and areas in the system. This permission does not enable the sites or areas management features. This is globally relevant permission, usually granted to users with high authority or privileged rights. Assigning this permission at a hierarchical level will have no effect.	Global Privileged
	Manage site user	Enables display of the Users tile in Site details panel and allows management of the user role assignments, in context of the selected Site. By clicking the Users tile the Site role assignments panel is opened, where all the users assigned to the current Site are listed, allowing the user to manage their role assignments. The list of users will be adapted to the currently logged-in user's permissions, hence if View users / View all users permissions are missing, the user will only be allowed to see and manage himself/herself, in this view. Warning In order to be able to perform advanced management operations, the user should also have the Manage user permission. Having this permission set at a global level, allows the user to manage the Users of all sites for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Users of the Site to which he/she was explicitly assigned.	Global Hierarchical
	Manage site applications	Enables display of the Manage Applications toolbar button in the Site details panel and allows Applications management in the context of the selected Site. Warning In order to change the current Site application(s) the user requires further permissions from the Applications section. If the user has no further permissions from the Applications section, he/she will only be allowed to change the currently assigned Application(s) parameters, in the Manage Application Mappings panel. Having this permission set at a global level, allows the user to manage the Applications of all sites for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Applications of the Sites to which he/she was explicitly assigned.	Global Hierarchical
	Manage site measure aggregations	Enables display of the Measure Aggregations tile in Site details panel and allows management of the assigned Measure Aggregations of the selected Site. By clicking the Measure Aggregations tile, the list of all assigned Measure Aggregations is displayed, allowing the user to manage the list by adding or removing Measure Aggregations. Having this permission set at the global level, allows the user to manage the Measure Aggregations of all Sites for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Measure Aggregations of the Site to which he/she was explicitly assigned.	Global Hierarchical
	Manage site public holidays	Enables display of the Public Holidays tile in Site details panel and allows management of Public holidays as follows: See the list of already assigned Public Holidays Add new Public Holidays Edit exiting Public Holiday Delete redundant Public Holidays Import Public Holidays Export Public Holidays See Public Holidays in the Requisition Notes dashboard Having this permission set at a global level, allows the user to manage the Public Holidays of all the Sites for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Public Holidays of the Site to which he/she was explicitly assigned.	Global Hierarchical
	Manage site response teams	Enables display of the Site Response Teams tile in Area details panel and allows management of the mapped Response Teams of the selected Site, as follows: See the list of already mapped Response Teams Add new Response Teams Mappings Edit existing Response Teams Mappings Delete redundant Response Teams Mappings Warning In order to be able to apply Response Teams Mapping with Event and Event Priority filters, the user is required to also have at least the View Events permission. Having this permission set on a global level, allows the user to manage the Response Teams Mappings of all the Sites for which at least view rights are already available. Having this permission set on a hierarchical level, the user will only be allowed to manage the Response Teams Mappings of the Site to which he/she was explicitly assigned.	Global Hierarchical
	Publish manual events for sites	Enables display of the Publish Manual Event toolbar button in the Site details panel. Clicking the Publish Manual Event button opens the Select Manual Event panel. In this view, the user can choose a manual event in order to manually trigger an alarm, having the current Site as a source. Important In order to publish Manual events, the user should also have the View events permission enabled. Tip For more details about events, please also visit the dedicated articles here. To learn more about publishing manual events for Sites please also read the Sites Management article. Having this permission set at the global level allows the user to publish manual events in the context of all the Sites for which at least view rights are already available. Having this permission set on a hierarchical level, the user will only be allowed to publish manual events only in the context of the Site to which he/she was explicitly assigned.	Global Hierarchical
	Manage area users	Enables display of the Users tile in Area details panel and allows management of the user role assignments, in context of the selected Area. By clicking the Users tile the Area role assignments panel is opened, where all the users assigned to the current Area are listed, allowing the user to manage their role assignments. The list of users will be adapted to the currently logged-in user's permissions, hence if View users / View all users permissions are missing, the user will only be allowed to see and manage himself/herself, in this view. Warning In order to be able to perform advanced management operations, the user should also have the Manage user permission. Having this permission set at a global level, allows the user to manage the Users of all areas for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Users of the Area to which he/she was explicitly assigned or has a permissive inherited relationship.	Global Hierarchical
	Manage area applications	Enables display of the Manage Applications toolbar button in the Area details panel and allows Applications management in the context of the selected Area. Warning In order to change the current Area application(s) the user requires further permissions from the Applications section. If the user has no further permissions from the Applications section, he/she will only be allowed to change the currently assigned Application(s) parameters, in the Manage Application Mappings panel. Having this permission set at a global level, allows the user to manage the Applications of all areas for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Applications of the Areas to which he/she was explicitly assigned or has a permissive inherited relationship.	Global Hierarchical
	Manage area measure aggregations	Enables display of the Measure Aggregations tile in Area details panel and allows Measure Aggregations management in the context of the selected Area. By clicking the Measure Aggregations tile, the list of all assigned Measure Aggregations is displayed, allowing the user to manage the list by adding or removing Measure Aggregations. Having this permission set at the global level, allows the user to manage the Measure Aggregations of all Areas for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Measure Aggregations of the Area to which he/she was explicitly assigned, or has a permissive inherited relationship.	Global Hierarchical
	Manage area response teams	Enables display of the Area Response Teams tile in Area details panel and allows Response Team Mappings management in the context of the selected Area. By clicking the Area Response Teams tile, the list of all Response Team Mappings is displayed, allowing the user to manage the list by adding or removing Response Teams Mappings. Warning In order to be able to apply Response Teams Mapping with Event and Event Priority filters, the user is required to also have at least the View Events permission. Having this permission set at a global level, allows the user to manage the Response Teams Mappings of all Areas for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Response Teams Mappings of the Area to which he/she was explicitly assigned, or has a permissive inherited relationship.	Global Hierarchical
	Publish manual events from areas	Enables display of the Publish Manual Event toolbar button in the Area details panel. Clicking the Publish Manual Event button opens the Select Manual Event panel. In this view, the user can choose a manual event in order to manually trigger an alarm, having the current Area as a source. Important In order to publish Manual events, the user should also have the View events permission enabled. Tip For more details about events, please also visit the dedicated articles here. To learn more about publishing manual events from Areas, please also read the Areas Management article. Having this permission set at the global level allows the user to publish manual events in the context of all the Areas for which at least view rights are already available. Having this permission set on a hierarchical level, the user will only be allowed to publish manual events only in the context of the Area to which he/she was explicitly assigned.	Global Hierarchical
Organizational Units	View organizational units	Allows viewing organizational units along with their corresponding calculations (from measure aggregations). This permission needs to be assigned at the hierarchy level. Hence, the user receiving this permission will only be allowed to view the organizational units to which he/she was explicitly assigned. For more details about the Entity role assignments feature, please also visit the dedicated article. This permission has no effect on the user's rights when assigned only at a global level.	Hierarchical
	Manage organizational units	Allows the user to perform the following operations: Create new Organizational Units Edit accessible Organizational Units Delete accessible Organizational Units Move Organizational Units Import Ewon / Nebiter configuration Having this permission set at a global level, allows the user to manage all organizational units, for which at least view rights are already available. Having this permission at a hierarchical level, allows the user to manage only the respective organizational unit. For more details about the Entity role assignments feature, please also visit the dedicated article.	Global Hierarchical
	View all organizational units	Allows viewing all the organizational units in the system. This permission does not enable the organizational unit's management features. This is globally relevant permission, usually granted to users with high authority or privileged rights. Assigning this permission on a hierarchical level will have no effect.	Global Privileged
	Manage organizational unit users	Enables display of the Users tile in Organizational Unit details panel and allows User role assignments management, in context of the selected Organizational Unit. By clicking the Users tile the Organizational Unit role assignments panel is opened, where all the users assigned to the current Organizational Unit are listed, allowing the user to manage their role assignments. The list of users will be adapted to the currently logged-in user's permissions, hence if View users / View all users permissions are missing, the user will only be allowed to see and manage himself/herself, in this view. Warning In order to be able to perform advanced management operations, the user should also have the Manage user permission. Having this permission set at a global level, allows the user to manage the Users of all Organizational Units for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Users of the Organizational Units to which he/she was explicitly assigned or has a permissive inherited relationship.	Global Hierarchical
	Manage organizational unit applications	Enables display of the Manage Applications toolbar button in the Organizational Unit details panel and allows Applications management in the context of the selected Organizational Unit. Warning In order to change the current Organizational Unit application(s) the user requires further permissions from the Applications section. If the user has no further permissions from the Applications section, he/she will only be allowed to change the currently assigned Application(s) parameters, in the Manage Application Mappings panel. Having this permission set at a global level, allows the user to manage the Applications of all Organizational Units for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Applications of the Organizational Units to which he/she was explicitly assigned or has a permissive inherited relationship.	Global Hierarchical
	Manage organizational unit measure aggregations	Enables display of the Measure Aggregations tile in Organizational Unit details panel and allows Measure Aggregations management in the context of the selected Organizational Unit. By clicking the Measure Aggregations tile, the list of all assigned Organizational Units is displayed, allowing the user to manage the list by adding or removing Measure Aggregations. Having this permission set at the global level, allows the user to manage the Measure Aggregations of all Organizational Units for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Measure Aggregations of the Organizational Units to which he/she was explicitly assigned, or has a permissive inherited relationship.	Global Hierarchical
	Manage organizational unit response teams	Enables display of the Organizational Units Response Teams tile in Organizational Unit details panel and allows Response Teams Mappings management in the context of the selected Organizational Unit. By clicking the Organizational Unit Response Teams tile, the list of all Response Team Mappings is displayed, allowing the user to manage the list by adding or removing Response Teams Mappings. Warning In order to be able to apply Response Teams Mapping with Event and Event Priority filters, the user is required to also have at least the View Events permission. Having this permission set at a global level, allows the user to manage the Response Teams Mappings of all Organizational Units for which at least view rights are already available. Having this permission at the hierarchical level, the user will only be allowed to manage the Response Teams Mappings of the Organizational Units to which he/she was explicitly assigned, or has a permissive inherited relationship.	Global Hierarchical
	Publish manual events from organizational units	Enables display of the Publish Manual Event toolbar button in the Organizational Unit details panel. Clicking the Publish Manual Event button opens the Select Manual Event panel. In this view, the user can choose a manual event in order to manually trigger an alarm, having the current Organizational Unit as a source. Important In order to publish Manual events, the user should also have the View events permission enabled. Tip For more details about events, please also visit the dedicated articles here. To learn more details about publishing manual events from Organizational Units please read the Organizational Units Management article. Having this permission set at the global level allows the user to publish manual events in the context of all the Organizational Units for which at least view rights are already available. Having this permission set on a hierarchical level, the user will only be allowed to publish manual events only in the context of the Organizational Unit to which he/she was explicitly assigned.	Global Hierarchical
Devices	View devices	Allows viewing devices and their corresponding calculations, from measure aggregations. The user receiving this permission will only be allowed to view the devices of the hierarchical entities to which he/she was explicitly assigned. This permission should be assigned on a hierarchical level, otherwise, it will have no effect on the user's rights. For more details about the Entity role assignments feature, please also visit the dedicated article.	Hierarchical
	Manage devices	Allows the user to perform the following operations: Create new devices Edit the accessible devices Clone devices Delete devices Having this permission set at a global level, allows the user to manage all devices of the hierarchical entities, to which he/she was explicitly assigned. Having this permission enabled at a hierarchical level, allows the user to manage only the devices to which he/she was explicitly assigned. For more details about the Entity role assignments feature, please also visit the dedicated article.	Global Hierarchical
	View adapters	Allows viewing and selecting adapters when adding and editing devices. This is hierarchically relevant permission, hence assigning it at the global level will not lead to the expected results.	Hierarchical
	Manage adapters	Allows creating new adapters, editing and deleting existing adapters, managing user assignments and application mappings. This permission can be assigned either on a global or hierarchical level. The obtained result will be the same. For more details about the Entity role assignments feature, when assigning this permission on a hierarchical level, please also visit the dedicated article.	Global Hierarchical
	Manage email event scripts	Allows creating, editing, and deleting email event scripts, in the context of the Email Adapter / Device. This is globally relevant permission. Assigning this permission on a hierarchical level will have no effect on the user's rights.	Global
	View all adapters	Allows viewing and selecting all the adapters available in the system. This is globally relevant permission, usually granted to users with high authority or privileged rights. Assigning this permission on a hierarchical level will have no effect.	Global Privileged
	Manage device users	Allows viewing the Users tile in the Device details panel and manages the user role assignments, in the context of the selected Device. By clicking the Users tile the Device role assignments panel is opened, where all the users assigned to the current Device are listed, allowing the user to manage their role assignments. The list of users will be adapted to the currently logged-in user's permissions, hence if View users / View all users permissions are missing, the user will only be allowed to see and manage himself/herself, in this view. Warning In order to be able to perform advanced management operations, the user should also have the Manage user permission. Having this permission set at a global level, allows the user to manage the Users of all Devices for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Users of the Devices to which he/she was explicitly assigned or has a permissive inherited relationship.	Global Hierarchical
	Manage device applications	Allows Devices Applications management. Warning In order to change the current Device application(s) the user requires further permissions from the Applications section. If the user has no further permissions from the Applications section, he/she will only be allowed to change the currently assigned Application(s) parameters, in the Manage Application Mappings panel. Having this permission set at a global level, allows the user to manage the Applications of all Devices for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Applications of the Devices to which he/she was explicitly assigned or has a permissive inherited relationship.	Global Hierarchical
	Manage device response teams	Allows viewing the Device Response Teams tile in Device details panel and manage the mapped Response Teams of the selected Device, By clicking the Device Response Teams tile, the list of all Response Team Mappings is displayed, allowing the user to manage the list by adding or removing Response Teams Mappings. Warning In order to be able to apply Response Teams Mapping with Event and Event Priority filters, the user is required to also have at least the View Events permission. Having this permission set at a global level, allows the user to manage the Response Teams Mappings of all Devices for which at least view rights are already available. Having this permission at a hierarchical level, the user will only be allowed to manage the Response Teams Mappings of the Device to which he/she was explicitly assigned, or has a permissive inherited relationship.	Global Hierarchical
	Publish manual events from devices	Enables display of the Publish Manual Event toolbar button in the Device details panel. Clicking the Publish Manual Event button opens the Select Manual Event panel. In this view, the user can choose a manual event in order to manually trigger an alarm, having the current Device as the source. Important In order to publish Manual events, the user should also have the View events permission enabled. Tip For more details about events, please also visit the dedicated articles here. To learn more details about publishing manual events from Device please read the Devices Management article. Having this permission set at the global level allows the user to publish manual events in the context of all the Devices for which at least view rights are already available. Having this permission set on a hierarchical level, the user will only be allowed to publish manual events only in the context of the Device to which he/she was explicitly assigned.	Global Hierarchical
Signals	Read signals	Allows the user to open the Edit signal panel in order to read the signal value, but does not allow the user to change and save the signal settings. This permission can be assigned on a global or hierarchical level.	Global Hierarchical
	Write signals	Allows the user to open the Edit signal panel in order to read the signal value and make further changes to the signal settings. Additionally, users having this permission enabled can add new signals or virtual signals and add/edit/remove signal compression settings. This permission can be assigned on a global or hierarchical level, as follows: Global level - grants the user permission to write all signals available for the hierarchical entities where he/she is explicitly assigned. Hierarchical level - grants the user permission to write only the signals where the permission was explicitly assigned. Having this permission assigned both globally and hierarchically will apply the global effects.	Global Hierarchical
	Edit measurement history	Allows the user to input counter signal corrections, as described by the dedicated article here. This is a globally relevant permission, hence assigning it on the hierarchical level will not lead to the expected results.	Global
	Manage virtual signals	Allows the user to manage virtual signals, as described by the dedicated article here. This is a globally relevant permission, usually granted to users with high authority or privileged rights. Assigning this permission on a hierarchical level will have no effect.	Global Privileged
	Manage signals	Allows the user to open signals in edit mode and manage their configuration, as described by the dedicated article, here. This is a globally relevant permission, usually granted to users with high authority or privileged rights. Assigning this permission on a hierarchical level will have no effect.	Global Privileged
Events	Manage events	Provides the user with the following rights: Add, edit and delete Event Groups Add, edit and delete Event Types Add, edit and delete Event priorities Add, edit and delete Events Add, edit and delete Manual events This permission is globally relevant and is usually associated with users with privileged rights. Assigning this permission on a hierarchical level will not grant the user with the expected rights.	Global Privileged
	View event occurrences	The main scope of this permission is to allow users to view event occurrences, in the Online Alarms panel / the Historical Alarms panel and to enforce the i4messenger notifications flow of events. Depending on a set of conditions, the rights enforced by this permission can vary, as follows: If the View event occurrences permission is disabled, the Online Alarms icon will be visible, but the user will only be allowed to view owned events. If the View event occurrences permission is disabled, the list of Historical Alarms will only list closed events owned by the currently logged-in user, including own audit events. If the View event occurrences permission is disabled, no event notifications will be delivered for the user, not even in case the user is set as Response Team member of a related entity. The View events occurrences permission, assigned on a global level, grants the user with the possibility to view all the alarms having as a source an entity with which the user has a relationship. If the alarm's owner is an equal or an inferior user, and the alarm source is a related entity, the currently logged-in user will be allowed to view that alarm, as well. If the Source of the Event is the Server, the user is required to have the View server events permission enabled, as well. Additionally, the user will receive event notifications via Email/SMS/Telegram, for events having as a source an entity where the user is explicitly assigned as a Response Team member. The View events occurrences permission, assigned on a hierarchical level, grants the user with the possibility to view all the alarms having as a source an entity in the context of which this permission was explicitly assigned. If the alarm's owner is an equal or an inferior user, and the alarm source is a related entity, the currently logged-in user will be allowed to view that alarm, as well. The user will only receive event notifications via Email/SMS/Telegram, for events having as a source an entity in the context of which this permission was explicitly assigned and the user is a Response Team member.	Global Hierarchical
	Close event occurrences	Allows or denies the right to close events, in the Online Alarms panel, as follows: If the Close event occurrences permission is disabled, the users will not see the Close button, nor in the occurrences list view, neither in the event occurrence detailed view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Close event occurrences permission is enabled on a global level the Close button will be displayed in both the occurrences list view and the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. If the Close event occurrences permission is enabled on a hierarchical level the Close button will only be displayed in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned.	Global Hierarchical
	Acknowledge event occurrences	Allows or denies the right to acknowledge an event, in the Online Alarms/Historical Alarms panels, as follows: If the Acknowledge event occurrences permission is disabled, the users will not see the Acknowledge button, nor in the occurrences list view, neither in the event occurrence detailed view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Acknowledge event occurrences permission is enabled on a global level the Acknowledge button will be displayed in both the occurrences list view and the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. If the Acknowledge event occurrences permission is enabled on a hierarchical level the Acknowledge button will only be displayed in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned.	Global Hierarchical
	Take event occurrence ownership	Allows or denies the right to take event ownership, in the Online Alarms/Historical Alarms panels, as follows: If the Take event occurrence ownership permission is disabled, the users will not see the Take ownership button, nor in the occurrences list view, neither in the event occurrence detailed view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Take event occurrence ownership permission is enabled on a global level the Take ownership button will be displayed in both the occurrences list view and the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. If the Take event occurrence ownership permission is enabled on a hierarchical level the Take ownership button will only be displayed in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned.	Global Hierarchical
	Assign event occurrence ownership	Allows or denies the right to assign event ownership to another user, in the Online Alarms/Historical Alarms panels, as follows: If the Assign event occurrence ownership permission is disabled, the users will not see the Assign ownership button, nor in the occurrences list view, neither in the event occurrence detailed view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Assign event occurrence ownership permission is enabled on a global level the Assign ownership button will be displayed in both the occurrences list view and the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. Warning To assign an event's ownership to another user, at least the View users permission should be enabled, otherwise the list of users will only show the currently logged-in user. If the Assign event occurrence ownership permission is enabled on a hierarchical level the Assign ownership button will only be displayed in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned. Warning To assign an event's ownership to another user, at least the View users permission should be enabled, otherwise the list of users will only show the currently logged-in user.	Global Hierarchical
	Change event occurrence priority	Allows or denies the right to change an event's priority, in the Online Alarms/Historical Alarms panels, as follows: If the Change event occurrence priority permission is disabled, the users will not see the Prioritize button, nor in the occurrences list view, neither in the event occurrence detailed view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Change event occurrence priority permission is enabled on a global level the Prioritize button will be displayed in both the occurrences list view and the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. Warning To change an event occurrence priority, the user is required to have the View permission, as well. Otherwise, the Priorities list will be empty. If the Change event occurrence priority permission is enabled on a hierarchical level the Prioritize button will only be displayed in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned. Warning To change an event occurrence priority, the user is required to have the View permission, as well. Otherwise, the Priorities list will be empty.	Global Hierarchical
	Comment event occurrences	Allows or denies the right to comment on an event, in the Online Alarms/Historical Alarms panels, as follows: If the Comment event occurrences permission is disabled, the users will not see the Comment button in the event occurrence details view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Comment event occurrence permission is enabled on a global level the Comment button will be displayed in the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the Comment event occurrence permission is enabled on a hierarchical level the Comment button will be displayed in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned. This is applied to both the Online Alarms panel and the Historical Alarms panel.	Global Hierarchical
	View event occurrence comments	Allows or denies the right to view an event's comment, in the Online Alarms/Historical Alarms panels, as follows: If the View event occurrence comments permission is disabled, the users will not see the contents of the Comment column in the Online Alarms panel, and the Comment section in the event occurrence details view panel will be hidden. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the View event occurrence comments permission is enabled on a global level the Comment column will be populated in the Online Alarms panel and the Comment section will be visible in the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the View event occurrence comments permission is enabled on a hierarchical level the Comment column will be displayed in the Online Alarms panel, but only the comments of Alarms sourcing from entities where this permission was explicitly enabled will be visible. Also, the Comment section will be visible and populated in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned.This is applied to both the Online Alarms panel and the Historical Alarms panel.	Global Hierarchical
	View event occurrence history	Allows or denies the right to view an event's history, in the Online Alarms/Historical Alarms panels, as follows: If the View event occurrence history permission is disabled, the users will not see the History section in the event occurrence details view panel. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the View event occurrence history permission is enabled on a global level the History section will be visible in the details of the occurrence view, for all the occurrences having as a source an entity with which the user has a relationship. This is applied to both the Online Alarms panel and the Historical Alarms panel. If the View event occurrence history permission is enabled on a hierarchical level the History section will be visible in the occurrence details panel, for all the occurrences having as a source an entity in the context of which this permission was explicitly assigned. This is applied to both the Online Alarms panel and the Historical Alarms panel.	Global Hierarchical
	View audit log	Allows auditing sensitive operations such as historical events performed by a user on an auditable action. The following actions can be audited: Login / Logout Change password Add / Edit / Delete user Change user password Change role assignments Any CRUD operation performed in the system For more details about Audit Events please also visit the dedicated article here.	Global
	View server events	Allows viewing all events having the Server as the source of the event, in Online and Historical alarms panels. If this permission is not enabled, the user can only see events sourcing from the Server, where he/she is Owner. This is a globally relevant permission. Assigning this permission on a hierarchical level will not grant the user with the expected rights.	Global
	Manage event scripts	Allows the user to add, edit and remove event scripts, as described by the dedicated article. This is a globally relevant permission, usually attributed to users with privileged rights. By enabling this permission on a hierarchical level won't lead to the expected results.	Global Privileged
Reports	Manage report definitions	This permission enables the following rights: View Report groups Create Report groups Edit Report groups Delete Report groups Create Report definitions Edit Report definitions, that the user has rights to view (View reports permission is enabled and entity role assignments have been performed) Delete Report definitions, that the user has rights to view (View reports permission is enabled and entity role assignments have been performed) This is a globally relevant permission. Assigning this permission on a hierarchical level only will have no effect on Report groups and definitions management.	Global
	View report definitions	Allows users to view report definitions, to which they have been explicitly assigned, by means of Entity role assignments. For more details about Entity role assignments please also visit the dedicated article here. This permission will only work if the Manage report definitions permission is also available for the user. This is a hierarchical permission, hence assigning it on a global level will lead to no results.	Hierarchical
	Schedule reports	Allows the user to schedule reports. The user will be allowed to schedule only the reports that have been explicitly assigned to the user profile, as described by this article. Warning Reports that were ONLY enabled for the user by means of the entity roles assignment feature, will not be available for scheduling. This is a globally relevant permission, hence, assigning it on a hierarchical level does not lead to the expected results.	Global
	Manage report schedules	Allows the user to create, edit and delete report schedules for the users to which the current user has a relationship. This is a globally relevant permission, hence, assigning it on a hierarchical level does not lead to the expected results.	Global
	User distribution lists	Allows sending scheduled reports to distribution lists (external email addresses). This is a globally relevant permission, hence, assigning it on a hierarchical level does not lead to the expected results.	Global
	Report archive	Allows the user to access the report archive list and add reports to archives. Warning The Report archive permission does not grant the user the rights to archive a report. Only users having the Report archiving setting enabled under the User profile, will be allowed to send reports to an archive. This is a globally relevant permission, hence, assigning it on a hierarchical level does not lead to the expected results.	Global
	View all report definitions	Allows users to view all report definitions in the system. This permission will only work if the Manage report definitions permission is also available for the user. This is a globally relevant permission, usually granted to users with high authority or privileged rights.	Global Privileged
Measure action	Manage measure action	This permission enables the following rights: view the measure actions, available for the hierarchical entities that the current user has access to, in the Measures panel. open and view the measure actions overview, available for the hierarchical entities that the current user has access to. view the Manage measure actions tile, in the hierarchical entity details panel, to which the current user has access. add new measure actions, for the hierarchical entities that the current user has access to. edit measure actions, for the hierarchical entities that the current user has access to. delete measure actions, for the hierarchical entities that the current user has access to. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results.	Global
	Import measure action	This permission enables the following rights: import measure actions, using the dedicated panel. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results.	Global
	View measure action	This permission enables the following rights: view the measure actions, available for the hierarchical entities that the current user has access to, in the Measures panel. open and view the measure actions overview, available for the hierarchical entities that the current user has access to. view the Manage measure actions tile, in the hierarchical entity details panel, to which the current user has access. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results.	Global
Manual counter	Manage manual counter	Allows managing the manual counters. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results.	Global
Requisition note	Requisition note power plant user	This permission enables the following rights: see Requisition Notes in his / her area(s) confirm Requisition Notes confirm deactivation Requisition Notes Tip Along with the Manage Site Public Holidays permission, the Requisition Notes calendar will also display the Public Holidays. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results.	Global
Requisition note	Requisition note hall manager	This permission enables the following rights: see Requisition Notes in his / her area(s) add Requisition Notes for his / her area(s) add deactivation Requisition Notes for his / her area(s) copy Requisition Notes from his / her area(s) edit Requisition Notes from his / her area(s) delete Requisition Notes from his / her area(s) Tip Along with the Manage SIte Public Holidays permission, the Requisition Notes calendar will also display the Public Holidays. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results.	Global
Applications	View applications	Allows the user to view i4designer listed application mappings, to which he/she is set as owner or assignee. This is hierarchically relevant permission, hence assigning it at the global level will not lead to the expected results. For more details about the i4designer Applications, please also visit the dedicated article here.	Hierarchical
	Manage applications	Allows creating, editing and deleting i4designer applications. Further on, this permission enables the synchronization options, available for application mappings, as follows: Synchronize Global Entities, Synchronize Signals, Synchronize Object Filters, Synchronize Event Filters. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results. For more details about the i4designer Applications, please also visit the dedicated article here.	Global
	View all applications	Allows viewing all i4designer applications. For more details about the i4designer Applications, please also visit the dedicated article here. This is a globally relevant permission, usually granted to users with high authority or privileged rights.	Global Privileged
	Manage own component configuration	Allows managing complex i4designer components (e.g. Trending components) by saving, loading, and removing own component configurations. This permission can be assigned on a global or hierarchical level, as follows: Global level - grants the user permission to manage the component configurations, of all accessible applications. Hierarchical level - grants the user with permission to manage the component configurations, of application mappings, scoped to specific hierarchical entities. Having this permission assigned both globally and hierarchically will apply the global effects.	Global Hierarchical
	Manage shared component configuration	Allows managing complex i4designer components (e.g. Trending components) by saving, loading, and removing shared component configurations. This permission can be assigned on a global or hierarchical level, as follows: Global level - grants the user permission to manage the component configurations, of all accessible applications. Hierarchical level - grants the user with permission to manage the component configurations, of application mappings, scoped to specific hierarchical entities. Having this permission assigned both globally and hierarchically will apply the global effects.	Global Hierarchical
Messenger	View response teams	Allows the user to view Response Teams in the following contexts: in the Response Teams list. Being a member of a Response Team does not provide the user with view rights. The user either needs to own the Response Team or have explicit view rights enabled for that Response Team. in context of Sites / Areas / Organizational Units / Devices, when assigning Response Teams to one of these entities. In order to assign Response Teams to a hierarchical entity, the user is required to also have the Manage Response Teams permission enabled on a global level. This is hierarchically relevant permission, hence assigning it at the global level will not lead to the expected results. For more details about i4messenger Response Teams, please also visit the dedicated article here.	Hierarchical
	Manage response teams	Allows the user with the possibility to manage Response Teams, as follows: Add new Response Teams Edit listed Response Teams Remove Response Teams Assign Response Teams to Sites, Areas, Organizational Units, and Devices, if the necessary management permissions are also enabled, for these entities. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results. Note that having this permission enabled does not provide the user with the rights to change a Response Team's owner, assign new members For more details about i4messenger Response Teams, please also visit the dedicated article here.	Global
	View all response teams	Allows viewing all the i4connected Response Teams. For more details about i4messenger Response Teams, please also visit the dedicated article here. This is a globally relevant permission, usually granted to users with high authority or privileged rights.	Global Privileged
	View notification profiles	Allows the user to view Notification Profiles in the following contexts: in the Notification Profiles list in context of a Response Team, when assigning Notification Profiles. This is hierarchically relevant permission, hence assigning it at the global level will not lead to the expected results. For more details about i4messenger Notification Profiles, please also visit the dedicated article here.	Hierarchical
	Manage notification profiles	Allows the user with the possibility to manage Notification Profiles, as follows: Add new Notification Profiles Edit listed Notification Profiles Remove Notification Profiles Assign Notification Profiles to Response Teams, if the user also has permissions Response Teams management permissions. This is a globally relevant permission, hence enabling it on a hierarchical level won't lead to the expected results. For more details about i4messenger Notification Profiles, please also visit the dedicated article here.	Global
	View all notification profiles	Allows viewing all the i4connected Notification Profiles. For more details about i4messenger Notification Profiles, please also visit the dedicated article here. This is a globally relevant permission, usually granted to users with high authority or privileged rights.	Global Privileged

Extended permissions

Extended permissions require database and code changes, hence these cannot be organized in the administration user interface. Usually, such extended permissions can be introduced for the custom modules, at request.

In this section:

i4connected Knowledge Base

Permissions

Tip

Built-in permissions

Warning

Warning

Warning

Important

Tip

Warning

Warning

Warning

Important

Tip

Warning

Warning

Warning

Important

Tip

Warning

Warning

Warning

Important

Tip

Warning

Warning

Warning

Warning

Warning

Warning

Tip

Tip

Extended permissions

Search results