# User accesss rights
The document describes the roles of users in Workgroups and the individual rights that they consist of.
Attention
The user access rights specified in the table apply only to objects owned by the user's Workgroup.
# Table of available rights
| Product | Rights for | Rights types | Description |
|---|---|---|---|
| fAcure | Functional monitoring | Prohibit View Edit | Viewing functional monitoring data FAcure Project management |
| IOps | Scripts | Prohibit View Edit | Viewing and using scripts Script management |
| IOps | Rules and Actions | Prohibit View Edit | Viewing and using Rules and Actions Managing Rules and Actions |
| IOps | SM.Access | Prohibit View Edit | Viewing and using CMDB and Service model |
| IOps | SM.Configuration Items | Prohibit View Edit | Viewing and using configuration items |
| IOps | SM.CI card | Prohibit View Edit | Viewing CI cards Updating / deleting CI cards |
| IOps | Accessibility.User Template | Prohibit View Edit | View - access to already created user templates and multi-templates, if any, and also capability to generate reports "Without template" Editing - managing user templates and multi-templates |
| IOps | Accessibility.Group Template | Prohibit View Edit | View - access to group templates and multi-templates, if any, and also capability to generate reports "Without template" Editing - management of group templates and multi-templates |
| IOps | Synthetic Triggers | Prohibit View Edit | Viewing and using synthetic triggers Managing synthetic triggers |
| Collector | Integrations.Data Streams | Prohibit View Edit | Viewing and managing data streams Adding data streams |
| Platform | Plugins | Prohibit View Edit | Using plugins Managing plugins (only for Userspace Admins) |
| Platform | Workgroup.Access | Prohibit View Edit | Viewing workgroup information Workgroup management |
| Platform | Workgroup.Mailings | Prohibit View Edit | Viewing and using mailing lists Mailing list management |
| Platform | Workgroup.Roles | Prohibit View Edit | Viewing user access rights User access rights management |
| Platform | Workgroup.Users | Prohibit View Edit | Viewing the list of workgroup users Managing workgroup users |
# System roles
When you create a Workgroup, the system roles Manager and User are created with default permissions
# Manager
The role Manager has the following rights by default:
| Product | Rights for | Rights type | Description |
|---|---|---|---|
| fAcure | Functional monitoring | Edit | |
| IOps | Scripts | Edit | |
| IOps | Rules and Actions | Edit | |
| IOps | SM.Access | Edit | |
| IOps | SM.CI card | Edit | |
| IOps | Accessibility.User Template | Prohibit | |
| IOps | Accessibility.Group Template | Prohibit | |
| IOps | Synthetic triggers | Edit | |
| Collector | Integrations.Data streams | Edit | |
| Platform | Plugins | Edit | |
| Platform | Workgroup.Access | Edit | |
| Platform | Workgroup.Mailings | Edit | |
| Platform | Workgroup.Roles | Edit | |
| Platform | Workgroup.Users | Edit |
# User
Standard role for non-group manager users. Contains the following rights:
| Product | Rights for | Rights type | Description |
|---|---|---|---|
| fAcure | Functional monitoring | Prohibit | |
| IOps | Scripts | Prohibit | |
| IOps | Rules and Actions | Prohibit | |
| IOps | SM.Access | Prohibit | |
| IOps | SM.CI card | Prohibit | |
| IOps | Accessibility.User Template | Prohibit | |
| IOps | Accessibility.Group Template | Prohibit | |
| IOps | Synthetic triggers | Prohibit | |
| Collector | Integrations.Data streams | Prohibit | |
| Platform | Plugins | Prohibit | |
| Platform | Workgroup.Access | View | |
| Platform | Workgroup.Mailings | Prohibit | |
| Platform | Workgroup.Roles | Prohibit | |
| Platform | Workgroup.Users | Prohibit |
# Userspace administrator
The Userspace Administrator system role is a special role in the Acure userspace. Only for this role the Administration panel is available. By default, it has the following permissions:
| Product | Rights for | Rights type | Description |
|---|---|---|---|
| fAcure | Functional monitoring | Edit | |
| IOps | Scripts | Edit | |
| IOps | Rules and Actions | Edit | |
| IOps | SM.Access | Edit | |
| IOps | SM.CI card | Edit | |
| IOps | Accessibility.User Template | Edit | |
| IOps | Accessibility.Group Template | Edit | |
| IOps | Synthetic triggers | Edit | |
| Collector | Integrations.Data streams | Edit | |
| Platform | Plugins | Edit | |
| Platform | Workgroup.Access | Edit | |
| Platform | Workgroup.Mailings | Edit | |
| Platform | Workgroup.Roles | Edit | |
| Platform | Workgroup.Users | Edit |
# Permissions available
Possible access rights:
- Prohibit
- View
- Edit
# Platform
Defines general access rights to:
- Agent Coordinators
- Workgroups
# Agent Coordinators
Prohibit:
- When restricting access to the section itself - the item in the menu is displayed.
- List of coordinators is empty.
View:
- Information about the coordinator and its settings, except for the API-key, displayed on the main page is available to the user.
- View access rights to the coordinator.
- View the list of scheduled tasks.
- View the current status of the coordinator.
- View added tags.
- Search coordinators.
Edit (includes all rights with type View):
- Displays coordinator API-key with Copy option.
- Create a new coordinator.
- Edit coordinator settings.
- Change access rights to the coordinator.
- Remove coordinator.
- Managing the status of the coordinator.
- Adding coordinator labels.
- Generation of a new API-key.