Roles

A role is a bundle of permissions. Permissions are defined in roles and nowhere else — a user is never granted an individual right, always a role, and always on a particular object: a tenant or a space.

This page is the catalogue of the roles that ship with the platform. How a role is granted is described under Permissions.

The roles that ship with the platform

The Level column says which object a role can be granted on. The Includes column names the roles whose permissions come with it — granting Space Admin grants Device Admin and Location Admin along with it.

Role	Level	Includes	What for
Tenant
Tenant Admin	Tenant	Space Admin, RTLS Analysis User, Tracking Admin	Manages the tenant: reading and editing users, invitations in full, groups, trusted certificates, integration flows, gateways — and through the included roles everything that is possible in the tenant’s spaces.
IoT Spaces
Space Admin	Space	Device Admin, Location Admin	Full access to the space: locations, devices, tags, tag profiles, scenarios and their operation.
Space Viewer	Space	Device Viewer, Location Viewer	Read-only access to the whole space.
Location Admin	Space	Location Editor	Full access to the locations of the space.
Location Editor	Space	Location Viewer	Creating, editing and deleting locations, editing maps, starting and stopping the scenarios of a location.
Location Viewer	Space		Reading locations, location types, maps and scenarios.
Device Admin	Space		Full access to the devices of the space and their things.
Device Viewer	Space		Reading devices and device models.
RTLS Analysis
RTLS Analysis User	Space		Analysis tags and reference points in full; locations, maps and tags for reading, tags for editing as well.
Tracking
Tracking Admin	Space	Tracking Viewer	Full access to the Tracking application: assets, asset types, routes, rules, tracks, labels and export templates.
Tracking Viewer	Space		Read-only access to the Tracking application.
Tracking Asset Assignment	Space		Creating and editing assets and assigning tags to them — the role for the workplace where tags are attached to equipment, without access to the rest of the application.

Role

Level

Includes

What for

Tenant

Tenant Admin

Tenant

Space Admin, RTLS Analysis User, Tracking Admin

Manages the tenant: reading and editing users, invitations in full, groups, trusted certificates, integration flows, gateways — and through the included roles everything that is possible in the tenant’s spaces.

IoT Spaces

Space Admin

Space

Device Admin, Location Admin

Full access to the space: locations, devices, tags, tag profiles, scenarios and their operation.

Space Viewer

Space

Device Viewer, Location Viewer

Read-only access to the whole space.

Location Admin

Space

Location Editor

Full access to the locations of the space.

Location Editor

Space

Location Viewer

Creating, editing and deleting locations, editing maps, starting and stopping the scenarios of a location.

Location Viewer

Space

Reading locations, location types, maps and scenarios.

Device Admin

Space

Full access to the devices of the space and their things.

Device Viewer

Space

Reading devices and device models.

RTLS Analysis

RTLS Analysis User

Space

Analysis tags and reference points in full; locations, maps and tags for reading, tags for editing as well.

Tracking

Tracking Admin

Space

Tracking Viewer

Full access to the Tracking application: assets, asset types, routes, rules, tracks, labels and export templates.

Tracking Viewer

Space

Read-only access to the Tracking application.

Tracking Asset Assignment

Space

Creating and editing assets and assigning tags to them — the role for the workplace where tags are attached to equipment, without access to the rest of the application.