Skip to main content
Version: 2.14.X

Detailed Permissions

The following tables describe the permissions available to apply to both roles and groups.

Authoring

PermissionView/EditControl
DeploymentsViewRead deployment-related statuses and data.
DeploymentsEditWrite deployment-related data, including the ability to deploy and terminate deployments.
ModelsViewRead authoring data models (projects, event patterns, event types, etc.).
ModelsEditWrite authoring data models (projects, event patterns, event types, etc.).
Schema DiscoveryViewUse Schema Discovery to search topics and view schemas.

Data Management

PermissionView/EditControl
ConnectorsViewUser is able to view connector configurations and status.
ConnectorsEditUser is able to create, run, and stop connectors.
Upload FilesViewUser is able to see file upload status and records in the Activity Monitor page of the Data Importer.
Upload FilesEditUser is able to upload files via Data Importer.

History

PermissionView/EditControl
AuditViewUser can visit the Audit Viewer application, which allows viewing historical actions.

Manual Actions

PermissionView/EditControl
Manual ActionsEditIf an event has manual actions available, a user can access the manual event interface to perform a specific action on the event.

User Management

PermissionRead/WriteControl
GroupsViewUser can see a list of groups in the system.
GroupsEditUser can create, delete, or modify a group.
RoleViewUser can see a list of roles in the system.
RoleEditUser can create, delete, or modify a role.
UsersViewUser can see a list of all users in the system.
UsersEditUser can modify another user's details, including first name, last name, access, role and group.

Workstation

PermissionView/EditControl
Collections AttachmentsViewUser can download attachments from a collection or its comments.
Collections AttachmentsEditUser can upload attachments to a collection and its comments.
Collections ExportViewUser can export data and reports from a collection.
Custom Field TemplatesEditUser is able to view and edit Custom Field Templates in Workstation Designer.
Data DeleteEditUser is able to perform administrative deletion of Workstation data.
Export BuilderEditUser can access/update the export builder tool to create, manage, or delete limited custom mappings from a collection into CSV format.
IngestEditUser can see and interact with the Admin screen and the “Ingestion settings” table on the Admin screen. Note: Write permission to "Ingest" is required for any user that wishes to set "Event Decorations" on Designer (which is handled via the "Templates Views" view permission).
Notification SettingsEditUser can see and interact with the "Notification Settings" table on the Admin screen, but they are required to also be granted access to "Ingest", otherwise they will not see the Admin screen at all.
Report BuilderEditUser can access/update the report builder tool.
TagsEditUser can see the Designer tab and the "Tags" mode within it. User can create, edit, or delete tags.
Templates Event DetailsEditUser can see the Designer tab and the "Event Detail Templates" mode within it. User can create, edit, or delete Event Detail Templates.
Templates ViewViewUser can view view templates.
Templates ViewEditUser can create, update, or delete view templates. User can see the "Event Decorations" mode in the Designer tab if they also have "Write" access to "Ingest".
ViewsViewUser can click into views but cannot add or delete widgets.
ViewsEditUser can create, edit, and delete views. Within a view, they can add, edit, or delete widgets.