Role dialog

Use the Role dialog to add a new role or edit an existing role. When finished, click Save.

Name

Type a unique name for the role characters). (This name cannot later be changed.)

Description

Type a description of the role (up to 255 characters).

Permissions

Select one or more check boxes for the permissions to be associated with the role. See Permissions for descriptions. You can also create custom permissions to be assigned to roles; see Configuring custom permissions.

NOTE: If a role has been assigned to users and you want to edit the roles permissions, be mindful that the users will notice a difference in which system features they can and cannot access.

Permissions

NOTE: The term asset where it appears means the same thing as device.

Device View

(Also called "Asset View.") Permission to read device profiles and any stored readings from devices in groups owned by the user. Permission also for read-only access to device schedules, device uploaded files, file transfer logs, alarms/alerts raised by device and to view charts, for devices in owned groups.

Device Management

(Also called "Asset Management.") Includes "Device View" plus permission to manage and interact with devices in groups owned by the user, including interacting directly with them to request readings, set attributes, run diagnostics, and request file transfers. Permission to create, modify, and delete device schedules and to acknowledge alerts applied to devices in owned groups.

Device Admin

(Also called "Asset Admin.") Includes "Device View" and "Device Management" plus permission to create, update, and delete devices in groups owned by the user.

Device Type Admin

(Also called "Asset Type Admin.") Permission to create, read, update, and delete device types, including configuring available commands and properties, thereby establishing the underlying capability of all devices of the associated device type. Not limited by the user's group ownership.

User Admin

Permission to create, update, and delete users, to assign their security roles, and to associate them as owners of any groups owned by the user. Permission also to create new permissions and new roles and to assign permissions to roles.

Group Admin

Permission to create, update, and delete sub-groups within any group owned by the user. Permission to create, update, and delete customers and to assign customers to owned groups.

Alert Admin

Permission to create, update, and delete alarms and alerts and to configure the Email Alert format. This is the underlying alarm and alert configuration, not specific to any operations, and is not limited by the user's group ownership.

System Admin

Permission to modify the system configuration information, including extended reports integration. If an owner of the Root group, this user can create, update, and delete groups, device types, devices, and users anywhere the system.

Reports View

Permission to view any of the reports that have previously run for devices in groups owned by the user.

Reports Execute

Permission to run and view any reports for devices in groups owned by the user.

Reports Admin

Permission to schedule, execute, and view any reports for devices in groups owned by the user.

Remote Desktop

Permission to run the Questra TotalAccess application (which includes the Remote Desktop function) on devices in groups owned by the user.

SoftwareDirector Admin

Permission to create and update software distribution packages for devices in groups owned by the user. Requires CMDB User permission to add prerequisite and resulting configuration constraints to software packages.

SoftwareDirector User

Permission to view software distribution packages and to schedule software updates for devices in groups owned by the user.

CMDB Admin

Permission to create and update configurations in the Configuration Management Database (CMDB), not limited by the user's group ownership.

CMDB User

Permission to view actual configurations of the devices in groups owned by the user.

SiteVisit Admin

Permission to create, edit, and assign new site visits for devices in groups owned by the user.

SiteVisit User

Permission to view and update the assigned site visits (via the Questra Courier application or other web services).

Dynamic Group Admin

Permission to create, edit, delete, and evaluate dynamic group definitions.

System Info View

Permission to view system information including system event logs, software version, and software license