Permissions define what rights a user has within each of the categories in the station. There are two Niagara permission levels: operator and admin. Within both levels, separate options exist for read access, write access, and invoke (action) access. See About permission levels.

When you add a user, a Permissions field is available for you to set that user’s permissions, using a Permissions popup dialog (permissions map), as shown in Figure 265.

Typically, you can use the Permissions dialog to assign specific rights to select categories for that user, such as shown in Figure 265.

The built-in admin account has all possible rights for every category (super user). Only when logged in as the admin user or another “super user”, can you assign super user rights, via the Super User checkbox.

Unlike in older NiagaraAX releases, a user cannot assign permissions to a user account that exceed the permissions assigned to their own user account. In general, assigning super user rights should be limited on a strict “special needs” basis. A possible example is in a Supervisor station, for the user referenced in client connections from other stations (vs. login by a person), in scenarios where Program objects are exported from JACE stations via ExportTags. Or, for “person users” who need to add/edit Program or Robot components.

To review and compare permissions among all users, the UserService provides a PermissionsBrowser view, as shown in Figure 266. Typically, you use this view to adjust permissions for any user.

In the PermissionsBrowser, columns represent individual users defined in the station. An expandable tree lets you navigate to objects of interest to review current permissions, shown in table cells using abbreviations (for read, write, and invoke). Operator level is small case; admin level is UPPER case.

Row coloring in the PermissionsBrowser provides the same data as in the CategoryBrowser, where:

You can double-click in any column to access that user’s permissions map. See Permissions Browser for more details.