Access Rights

The Access Rights control what a user is allowed to see and edit. The Access Rights in the Configuration define the roles (system roles + individual roles) in the Central Administration.

You can manage the access rights via the "Key" icon. This is used to edit the access rights or assign new access rights. Access rights can be assigned within the top-level group, but also individually for each sub-group.

Standard Access Rights (Default)

By default, each client contains three access rights, each of which defines a System role in the Administration. These default access rights cannot be changed.

Create Individual Access Rights

If you want to create additional individual access rights in addition to the standard ones (default), you can add a new individual access right for an individual role or an individual user.

The table shows an overview of which access rights (operations) have been assigned to which role (principal). You can edit the access rights using the pencil, and delete them using the barrel.

A new access right is created via the Plus button:

Specify the type (user or role). Select User to assign one or more rights to a user. Use the Role selection to restrict or expand an individual role more precisely.
User selection: You can select a previously created user via the Principal field.
Role selection: Here you can choose between previously created individual roles (created in the "Individual roles sub-function" area in User Management).
The Operations area is a multiple selection field.

Permission	Description
Read	Permission to read error messages and to view Dashboards and process images.
Operate	Permission to operate the Dashboards.
Configuration	The entire configuration can be viewed and edited.
Dashboard Configuration	Read permission + permission to edit the Dashboard. This means that widgets can be added, edited or deleted.
Access rights management	Permission to distribute access rights.
Maintenance Management	Currently without function.

The assigned access rights can also be restricted in scope to certain areas (e.g. groups, signals, etc.).

The following areas can be selected via the multiple selection function:

Legacy

…