Role Manager (wbutil-RoleManager)

This manager creates, edits and deletes roles. It is the default view of the RoleService and is located in the station’s Services container.

The system creates the admin role by default and grants it super user permissions. The admin role does not appear in the Role Manager view and you may not delete it.

Figure 37.   Role Manager view
Image

To access this view, expand Config > Services and double-click RoleService.

Columns

Column Description
Name Identifies the role to be assigned to one or more users. Role names are case sensitive.
Permissions Associates a name with a specific set of permissions.
Viewable Hierarchies Identifies the hierarchies this user may view.
Type Identifies the type of entity being created.
Number to add Allows you to create many rows at once in the Role Manager view’s table.

New role window

Figure 38.   New role window
Image
Property Value Description
Type Role (default) Identifies the type of entity being created.
Number to add number Allows you to create many rows at once in the Role Manager view’s table.

New role properties

 CAUTION: There are risks involved in giving any user broad permissions on the Role Service. For example, giving a user admin write permissions on the Role Service allows that user to create, edit, rename or delete any role. Best practices recommend that such permissions on the Role Service be limited only to appropriately authorized users. 
Figure 39.   New role properties
Image
Property Value Description
Name text Provides a name for the role.
Permissions check box and text field Grants permissions to roles.