Hoppa till huvudinnehåll

Lesson 2.7 Roles

This lesson will teach users how to navigate and manage Roles. Roles directly give or remove access to specific API endpoints and also hide UI elements the user has no access to. Users will learn to assign roles to different users and see the effect on those users' accounts. To complete this lesson, you will need the Organization Admin role and a few colleagues who can check how different roles affect their accounts.

Roles define what a user can do within Yggio. A user can have a preset role (admin, editor, viewer, installer) or a custom role. The UI and API enforce the permissions defined by the roles.

Preset roles​

  • Admin: Full read/write access to every resource and action, including creating, updating, deleting, and managing roles.
  • Editor: Read and modify (GET/PUT/PATCH) resources except roles; cannot create (POST) or delete, and has read-only access to access policies.
  • Viewer Basic: Read-only (GET) permissions; UI limited to the Dashboard. No access to roles management.
  • Viewer Standard: Read-only (GET) permissions; UI access to the Dashboard, Device list, and Map. No access to roles management.
  • Viewer Full: Read-only (GET) permissions; UI access to all areas except Organizations and User Groups. No access to roles management.
  • Installer: Read-only across the platform except devices, where GET/PUT/PATCH are allowed for provisioning. No access to roles management.

All three viewer variants share the same API permissions (read-only) and differ only in which UI sections are exposed. Try assigning each of the three viewer roles to a colleague in turn and compare what they can see in the UI.

Custom roles​

Custom roles can be created to fit specific needs. When creating a custom role, you select from a list of resources and actions to define what the user can do.

Roles administrator page​

On the roles administrator page you can select users to assign roles to. You can set a predefined role or create a custom role for specific users or all selected users at once. Only admins can administer roles.

Learn More​

  1. User Guide: Roles