System Roles

About the System Role

The settings in System Roles regulate the permission for options that apply system-wide. The options controlled by this role remain the same in all projects.

Every user always has exactly 1 system role. Users cannot have more than 1 system role at the same time.

Standard System Roles

Eliona is delivered with the following roles by default:

System Owner

This role is created during the system deployment and has all permissions.

• The "System Owner" role is the only role that can create new system roles.

• The "System Owner" role is the only role that can assign the "System Admin" role.

System Admin

A role with extensive rights. Users with this role can, among other things, create new users. Users with the "System Admin" role can NOT assign the "System Admin" role to other users.

System User

This role is automatically assigned to every newly created user. Users with this role have no write permissions and can neither create new system admins nor new system users.

Standard roles cannot be changed or deleted.

Create a Custom System Role

Only owners of the "System Owner" system role can create new system roles.

You can create and customize an unlimited number of custom roles.

Proceed as follows to create a new system role:

System Role Options

Options for a system role

Deactivate a universal switch to hide the corresponding menu item

A	Name	Name of the system role
B	Role Access	When this switch is activated, other authorized users (e.g. admins) can assign this role to users. -> More info
C	Universal switch "Asset"	Activate/deactivate all write and read access for the "Asset" function
C1	Asset	Grant write/read access for "Asset Modeling"
D	Universal switch "Connection"	Activate/deactivate all write and read access for the "Asset" function Deactivate the switch to hide the menu item
D1	Format	Grant write/read access for "Format"
D2	Functions	Grant write/read access for "Functions"
E	Universal switch "Eliona"	Activate/deactivate all write and read access for the "Eliona" function
E1	Projects	Grant write/read access for "Projects"
E2	Provider	Grant write/read access for "Provider"
E3	Roles	Grant write/read access for "Roles"
E4	Tags	Grant write/read access for "Tags"
E5	Users	Grant write/read access for "Users". When write access is activated for this item, users with this system role can create new users.
F	Universal switch "Monitoring"	Activate/deactivate all write and read access for the "Monitoring" function
F1	Monitoring	Grant write/read access for "Monitoring"
G	Universal switch "Settings"	Activate/deactivate all write and read access for the "Settings" function
G1	Apps	Grant write/read access for "Apps"
G2	Audit Log	Grant write/read access for "Audit Log"
G3	API Keys	Grant write/read access for "API Keys"
G4	License	Grant write/read access for "License"
G5	System	Grant write/read access for "System"
G6	Templates	Grant write/read access for "Templates"

[B] Role Access

With this option, you can specify who can assign the corresponding system role to other users.

This function can be configured separately for each system role.

Switch activated This system role can be assigned by users whose system role has write permissions in the Roles area.

Switch deactivated This role can only be assigned by the System Owner.

Assign a System Role to a User