Roles
Create a role, tick what people with that role can manage and create, then give it to users.
This page creates a role and ticks what people with that role can do.
Your role needs Can create role, Can edit role or Can delete role, depending on the task.
Add a role
- Open Roles and press Add role.
- Fill in Name.
- Under Administration, tick the Configuration tasks this group can do (administration permissions).
- Under Permission, tick what this group can create (permissions to create content).
- Press Save.
Then go to the Users page and give this role to the people who need it.
A new role has no permissions. If you tick nothing under Administration, people with this role cannot open Configuration, which suits ordinary users.
Edit a role
Find the role in the Search roles box and press Edit. Tick or untick, then press Save.
Built-in roles
Every site has the roles Administrator and User from the start.
- Administrator has every administration permission and User has none. The boxes under Administration cannot be changed for these two roles.
- The boxes under Permission can be changed for both. A new site lets User create everything.
- These two roles cannot be deleted, and the Administrator role can be edited only by an Administrator.
Delete a role
Before you delete, move everyone who has this role to another role. You can see it in the Role column of the Users page. The system gives no warning, and people who still have a deleted role have no permissions at all.
Then press Delete in the role's row and press Delete again in the confirmation box.
If you already deleted a role that people still use, the Users page shows their role as User, but they actually have no permissions. Open their account and choose a new role.
Administration permissions
The boxes under Administration decide which Configuration pages this group can use, and whether it can edit the Portal page.
| Tick | What it allows |
|---|---|
| Can create user, Can edit user, Can delete user | Add, edit and delete users. Editing includes changing other people's passwords and roles. |
| Can create role, Can edit role, Can delete role | Add, edit and delete roles. |
| Can create credential, Can edit credential, Can delete credential | Manage API keys and OAuth clients. Anyone with any one of these also sees the values of API keys. |
| Can edit configuration | Edit Sign-in & security, Sign-in page, Default map and Public access, and view the System page. |
| Edit the Portal page (under Portal page) | Edit the draft of the Portal page, upload its images and publish. See Edit the Portal page. This does not turn Public access on or off. That needs Can edit configuration. |
| Can manage apps | Install and uninstall Apps on the Apps page. |
The permission to see the Audit log has no box yet. See Audit log.
Permissions to create content
The boxes under Permission decide what this group can create in the Apps, for example Can create web map, Can create form and Can create folder. Can import file lets people upload files. If a box is not ticked, the platform does not let people create that kind of thing.
The Can create group box is separate, under Group management. This box allows creating, editing and deleting groups.