Roles & Permissions

Access to a deployment is controlled through Deployment Roles. A user must have an explicit role on a deployment to access its devices and data.

For an overview of both levels (workspace and deployment), see Workspace > Roles & Permissions.

Deployment roles

Deployment roles control what a user can do within a specific site or installation.

Role	Description
Admin	Full read and write access to everything within the deployment.
Technician	Can view devices, create and complete work orders, create cases, and manage spare parts within the deployment.
Viewer	Read-only access to the deployment’s devices, work orders, cases, and inventory.
End-Customer	Can view devices and create cases. Designed for customers who need to report issues but don’t perform maintenance work.

Note

A user can have different deployment roles across different deployments within the same workspace. For example, a technician might be an Admin in one deployment and a Viewer in another.

Interaction with workspace roles

• Every user needs an explicit deployment role to access a specific deployment — roles are not inherited automatically.
• A Workspace Admin is automatically given the Admin deployment role on existing and future deployments. This role can also be removed per deployment.

Assigning deployment roles

You assign deployment roles per site through member management. See Managing Members.