Configuring cloud roles

General information

Each role has different access settings for users. To configure a cloud role, go to the System settings tab→ Cloud roles.

Creating and configuring a role

To create a role, do the following:

1. Click the Add a new role button.
2. In the Name field, enter the name of the role.
   
   
3. Set the checkbox next to the required access permission. You can apply the following permissions for cloud roles:
   1. User management
      

      Permission	Description
      Cloud permission: Assign	Allows you to move users into groups. Without this permission, you can't change groups of users
      Domain policies: Edit	Allows you to edit domain policies. Without this permission, you can't edit domain policies and users
      Cloud permission: Edit Users	Allows you to create and delete users in the User permissions tab → Users. Without this permission, the Create user button isn't displayed, and you can't create/delete users Attention! You cannot disable this permission for users with the Administrator role.
      Domain roles: Manage	Allows you to manage domain roles (assign, edit, delete, and so on). Without this permission, you can't manage domain roles Attention! You cannot disable this permission for users with the Administrator role.
      Cloud Permissions: Manage	Allows you to manage cloud permissions. Without this permission, you can't manage cloud permissions Attention! You cannot disable this permission for users with the Administrator role.
      Users group: Manage	Allows you to manage groups of users, including moving users between groups. Without this permission, you can't move users between groups
      Domain policies: View	Allows you to view domain policies. Without this permission, only the domain of the user's account is available to the user; other domain policies aren't displayed
      View Users	Allows you to view a user list in the cloud. Without this permission, the Users tab in the User permissions section is inactive, and you can't access the user list

   2. Access to functions
      

      Permission	Description
      Change password	Allows you to change the user password and displays the Authentication section in the user settings. Without this permission, you can't change the password
      Dashboards: Create	Allows you to create dashboards. Without this permission, you cannot create dashboards. When you try to create a dashboard, you are redirected to the Dashboards tab
      Dashboards: Edit	Allows you to edit the created dashboards. Without this permission, the Edit button (the pencil icon) isn't displayed, and you can't edit the created dashboards
      Edit Dashboards in Marketplace	Allows you to change the settings of the dashboards in the marketplace (name, data, schedule, and so on)
      Manage Face lists	Allows you to manage face lists that the user creates. Without this permission, you can't create and edit face lists
      Manage LP lists	Allows you to manage LP lists that the user creates. Without this permission, you can't create and edit LP lists
      Monitoring: Edit	Allows you to edit the Monitoring microservice: add new widgets to a dashboard, delete, rename, change color, size, and so on
      Dashboards: Export	Allows you to export dashboards. Without this permission, you can't export dashboards
      Dashboards: Import	Allows you to import dashboards. Without this permission, you can't import dashboards
      Manage all Face lists	Allows you to manage face lists of users (creating, editing, removing). Without this permission, the Faces tab isn't displayed
      Manage all LP lists	Allows you to manage LP lists of users (creating, editing, removing). Without this permission, the LPs tab isn't displayed
      LDAP sources: Manage	Allows you to manage LDAP catalogs
      License key: Manage	Allows you to manage license keys
      Streaming: Manage	Allows you to use the streaming function and get the streaming address in the Devices tab → Streaming. Without this permission, the Streaming parameter isn't available
      Run mini configurator	Allows you to use mini configurator
      Dashboards: Share	Allows you to share a link to the dashboard. Without this permission, the Share button isn't available
      Update quota for manual export	Allows you to change the quota for uploading files
      Video export from web-client to the cloud	Allows you to export video to the cloud. If you disable this permission, the corresponding interface elements are hidden
      View classifier	Displays the Classifier tab. Without this permission, the Classifier isn't displayed
      View Dashboards	Allows you to view dashboards. Without this permission, the Dashboards tab isn't displayed
      View Dashboards in Marketplace	Allows you to view dashboards in the marketplace. Without this permission, dashboards in the marketplace aren't displayed in the Dashboards tab
      View diagnostics	Allows you to view diagnostics of the system
      Access to FULL audit	Allows you to view the full audit. Without this permission, you can't view the full audit
      Monitoring: View	Allows you to display the Monitoring microservice in the sidebar of dashboards. Without this permission, the Monitoring microservice isn't displayed in the sidebar
      View Reports	Allows you to view and edit reports. Without this permission, the Reports tab isn't displayed
      View User Rights	Allows you to view user rights. Without this permission, you can't view user rights

   3. System setup