Permissions (Configuration—Users)
In this tab it is possible to:
-
assign permissions to users to perform actions in the system;
-
differentiate the access levels for user groups;
-
select sections, available for users in the user interface.
| It is possible to set default rights to new registered users in the subsection User of the section Server of the server configuration file. |
| This tab is available for users with the permission for manage users. |
General permissions
| Name | Description | Record in the server configuration file | |||
|---|---|---|---|---|---|
Run operations |
It enables the section Operations and allows users to run operations. |
"execute-operations" |
|||
Search and bulk operations |
It enables the functionality Search and Bulk operations.
|
"run-bulks" |
|||
Managing objects, properties and documents |
It allows to
It also allows to view and edit all the sections of objects except the Monitoring section. |
"manage-objects" |
|||
Create objects |
It allows to
objects. |
"create-objects" |
|||
Modify objects |
It allows to
|
"modify-objects" |
|||
Delete objects |
This allows to delete objects. |
"delete-objects" |
|||
Managing links, properties and documents |
It allows to
It also allows to view and edit all the sections of links except the Monitoring section. |
"manage-links" |
|||
Create links |
It allows to create links. |
"create-links" |
|||
Modify links |
It allows to
|
"modify-links" |
|||
Delete links |
It allows to delete links. |
"delete-links" |
|||
Manage flows |
It allows to create, modify and delete flows.
|
"manage-flows" |
|||
Create flows |
It allows to create flows. |
"create-flows" |
|||
Modify flows |
It allows to modify flows.
|
"modify-flows" |
|||
Delete flows |
It allows to delete flows. |
"delete-flows" |
|||
Managing documents of objects and links |
It allows to view and edit the Documents section.
|
"manage-documents" |
|||
Create documents |
It allows to add links to web pages. |
"create-documents" |
|||
Modify documents |
It allows to modify documents. |
"modify-documents" |
|||
Delete documents |
It allows to delete documents. |
"delete-documents" |
|||
Upload documents |
It allows to attach files to objects. |
"upload-documents" |
|||
Managing properties of objects and links |
It allows to view and edit the Properties section.
|
"manage-properties" |
|||
Create properties |
It allows to create properties. |
"create-properties" |
|||
Modify properties |
It allows to modify properties. |
"modify-properties" |
|||
Delete properties |
It allows to delete properties. |
"delete-properties" |
|||
Manage dictionaries |
Configures the ability to manage existing dictionaries and creation of new ones. |
"manage-dictionaries" |
|||
Modification dictionary data |
Configures the ability to add new entries to existing dictionaries. |
"update-dictionaries" |
|||
View dictionaries in configuration |
Enables configuration section Dictionaries
|
"read-dictionaries" |
|||
Manage dictionaries for monitoring |
Configures the ability to manage existing dictionaries for monitoring and creation of new ones. |
"manage-dictionaries-monitoring" |
|||
Modification of dictionary data for monitoring |
Configures the ability to add new entries to existing dictionaries. |
"update-dictionaries-monitoring" |
|||
View dictionaries for monitoring in configuration |
Enables configuration section Dictionaries for monitoring
|
"read-dictionaries-monitoring" |
|||
Manage classes |
It enables the button in the sections It enables in the System configuration window the tab Object classes. |
"manage-classes" |
|||
Manage operations |
It allows to view and edit the Operations section. |
"manage-operations" |
|||
Manage monitoring settings |
It allows to view and edit the Monitoring section. |
"manage-service-properties" |
|||
It enables the possibility to use the option Script with text when using the probe Program or script execution. It also enables the tab Scripts in the System configuration window. |
"manage-scripts" |
||||
View sections
This part allows to show/hide sections, available in the End view to users/user groups.
| Section | Record in the server configuration file |
|---|---|
"view-section-stat" |
|
"view-section-properties" |
|
"view-section-documents" |
|
"view-section-state-history" |
|
"view-section-history-graph" |
|
"view-section-monitoring" |
|
"view-section-entity-settings" |
|
"view-section-state-conditions" |
|
"view-section-state-triggers" |
|
"view-section-widgets" |
|
"view-section-audit-log" |
|
"view-section-config-log" |
|
"view-section-operations" |
|
"view-section-operations-history" |
|
"view-section-incident-conditions" |
|
"view-section-stat-rules" |
System administration permissions
| Name | Description | Record in the server configuration file |
|---|---|---|
Manage system configuration |
It enables in the System configuration window the tabs |
"manage-configuration" |
Update agents |
It allows to update separate agents by the button and all agents in the tab Agents in the System configuration window. |
"upload-agent-updates" |
Manage users |
It allows to administer all system users. |
"manage-users" |
Manage event log |
"manage-event-log" |
|
Manage historical data |
"manage-history" |
|
Run object discovery |
It allows to use node/api/discovery REST-method. |
"run-discovery" |
Read session log |
It enables the Session log tab in the System configuration window. |
"read-session-log" |
Security log permissions
| Name | Description | Record in the server configuration file |
|---|---|---|
Monitoring logs and events |
Gives access to the security log |
"read-security-log" |
Group and user permissions interaction
If a user belongs to a group or several groups, then all allowed permissions are summed:
| Group value | User value | Result for user |
|---|---|---|
Yes |
Yes |
Yes, without possibility to change the user value. |
Yes |
No |
Yes, without possibility to change the user value. |
No |
Yes |
Yes, with possibility to change the user value. |
No |
No |
No, with possibility to change the user value. |