Users and Roles
Manage user accounts, assign roles, and configure the permission matrix.
Navigate to Users (/users) for account and role management.
Users tab
Create a user
- Click Add on the Users tab
- Set username, password, full name, and role
- Optionally assign a plant scope to limit data access
- Optionally set a UNS path filter for tag-level restrictions
Requires users.create permission.
Edit and deactivate
Update user details with users.update. Deactivate accounts instead of deleting when audit history must be preserved.
Roles tab
The Roles tab shows the permission matrix for all resources and actions.
System roles
| Role | Description |
|---|---|
| ADMIN | Full platform access |
| OPERATOR | Operational CRUD without delete on most resources |
| VIEWER | Read-only |
| ENGINEER | Extended write access for devices, rules, programs |
Custom roles
Create custom roles with specific permission strings per resource. Denied actions override grants — use for fine-grained control.
Requires roles.create and roles.update.
Plant scope
When a user has a plant assignment, all list queries and mutations are limited to that plant. Admins without plant scope see all plants.