# Permission Management

Since release 1.5 NagVis contains a very detailed permission management. It is a role based concept where users can be assigned to one or several roles while the roles have permissions assigned.

The permissions of the different roles of a user are summarised and control the actions the user is able to perform.

# Roles

## Default Roles

In a fresh installation there are four roles defined:

- Administrators: Full permissions throughout the whole installation
- Managers: Read and write access to all maps, automaps and rotations. Allowed to create new maps, automaps and rotations.
- Users (read-only): Read access to all maps, automaps and rotations throughout the installation
- Guests: Read access to all demo maps, automaps and rotations

These default roles should be sufficient in the beginning. You may delete these users and roles but please be aware NOT to delete the last administrative user and role.

## Customising the Roles

It is possible to create new roles for customising the permissions of users and groups of users.

For example it is easy to create a role for all SAP administrators which then can only access the SAP related maps.

# Permissions

The permissions are hardcoded in NagVis. A single permission consists of three elements:

- Module: The related module (Map, Automap, Rotation, ...)
- Action: The related action (view, edit, delete, ...)
- Object: The related object (A particular user, map, ...)

Each of those three elements can be set by a dedicated name or alternatively by a wildcard "*" which then matches all modules, actions or objects.

Here is a list of all available permissions in NagVis:

Module | Action | Object | Description
--- | --- | --- | ---
* | * | * | Grants full access to NagVis. No other permissions are needed.
Auth | logout | * | Allows a user to logout from NagVis.
AutoMap | add | * | Create a new automap.
AutoMap | delete | * | Delete all automaps.
AutoMap | edit | * | Edit all automaps.
AutoMap | view | * | View all automaps.
AutoMap | delete | <Name> | Delete a specific automap.
AutoMap | edit | <Name> | Edit a specific automap.
AutoMap | view | <Name> | View a specific automap.
ChangePassword | change | * | Allows a user to change one's own password.
General | * | * |
MainCfg | edit | * |
Map | add | * |
Map | delete | * |
Map | edit | * |
Map | view | * |
Map | delete | <Name> | Delete a specific map.
Map | edit | <Name> | Edit a specific map.
Map | view | <Name> | View a specific map.
Overview | view | * |
RoleMgmt | manage | * |
Rotation | view | * |
Rotation | view | <Name> | View a specific rotation.
Search | view | * | Search objects on maps and automaps.
UserMgmt | manage | * |