/
Permissions (Devices)

Permissions (Devices)

Owned by Olesya Tantsyura
Last updated: Dec 18, 2024
4 min read

1. Description

Here you select the Roles and their rights regarding this Device.

It consists of the following elements:

  1. Creation tool (Fig.1(1));

  2. Refresh button (Fig.1(2));

  3. Registry (Fig.1(3));

  4. Pagination (Fig.1(4)).

Fig. 1. Permissions tab

The following Users/Roles get into the registry entries when creating a Device:

  1. There are no entries in the Managed by records tab of the devices section — only the User who created the Device.

  2. There are entries on the Managed by records tab of the devices section: 

    •  the User who created the Device:

    • those Grantees are listed on the Managed by records tab of the devices section for which the Grantor is the creator of the Device. All the Roles of the User who created the Device and the User himself are considered Grantor.

The entered Roles and their rights concerning this Device are used when Managed by records is enabled on the Objects page (switch in the On position) in the devices entry.

The Permissions tab shows only the Roles and Users that you can view. If you do not have permission to view other Users, you will only see yourself and your Roles on the Permissions tab, if they are configured there.

1.1. Creation tool

Use the add button (Fig.1(1)) to add a Role. When you click the add button, the New grantee modal window opens (Fig. 2). The Role drop-down list contains a list of all Roles and Users.

To quickly find the desired User or Role, you can use the Role field as a search field: enter the name of the User or Role you are looking for, and only Users or Roles containing the entered expression will be displayed.

You can distinguish a User from a Role by icons:

— a User;

— a Role.

Clicking on a particular Role or User selects it. The Add button adds the selected Role/User to the registry entries. Clicking the Close button closes the modal window without adding entries to the registry. Clicking the close button () closes the modal window without adding entries to the registry.

Fig. 2. New grantee modal window

The added Role, or User, has the following configuration:

  • Read — Allow;

  • Edit — Forbidden;

  • Delete — Forbidden.

These can be changed by selecting the required value in the column's drop-down list.

The User who created the Device has the Allow with delegation access option for all actions.

1.2. Refresh button

1.3. Registry

 Consists of a set of fields:

  • Name — the name of the Role or User;

  • Read — drop-down list with permissions to read;

  • Edit — drop-down list with permissions to edit.

  • Delete — drop-down list with permissions to delete;

  • Removal tool — removes the entry.

Permission options:

  • Allow — the action is allowed;

  • Allow with delegation — itself has permission and can grant such permission to others;

  • Forbidden — the action is forbidden.

1.4. Pagination

2. Opportunities

2.1. Add a Role or User to the list of those who have access to the Device

Goal

Add a Role that will have access to the Device

Goal

Add a Role that will have access to the Device

Preconditions

  1. Access to the Admin application;

  2. Access to the Devices partition in the Admin application;

  3. Permission to create or edit in the Devices partition;

  4. The presence of a Device or the creation of a new one.

Steps

 

  1. Click the add button. The New grantee modal window opens.

  2. Click on the Role field. A drop-down list of existing Roles opens.

  3. Select the required Role. The drop-down list is closed.

  4. Click on the Add button.

Result

The modal window closes. The entry has been added to the registry.

2.2. Remove a Role or User from the list of those who have access to the Device

Goal

Remove the Role that has access to the Device

Goal

Remove the Role that has access to the Device

Preconditions

  1. Access to the Admin application;

  2. Access to the Devices partition in the Admin application;

  3. Permission to create or edit in the Devices partition;

  4. The presence of a Device or the creation of a new one;

  5. At least one entry in the registry.

Steps

 

  1. Find the Role entry you want to remove.

  2. Click on the field in the Read column. A drop-down list will open.

  3. Select Forbidden from the drop-down list by clicking on it.

Result

The Role has been removed from the registry.

2.3. Change action permission from Role to Device

Goal

Change action permission

Goal

Change action permission

Preconditions

  1. Access to the Admin application;

  2. Access to the Devices partition in the Admin application;

  3. Permission to create or edit in the Devices partition;

  4. The presence of a Device or the creation of a new one;

  5. At least one entry in the registry.

Steps

 

  1. Find the Role whose permission you want to change.

  2. Click the field in the desired column. A drop-down list will open.

  3. Select the required value from the drop-down list and click on it.

Result

Data saved.