Roles
What the admin and the viewer roles can do.
| Role | Permissions |
|---|---|
admin | Everything: Environments, VLANs, credentials, collector tokens, rules, users, and all changes. |
viewer | Read only: Environments, VLANs, maps, hosts, scans and rules. |
Pages
| Page | admin | viewer |
|---|---|---|
| Environments, VLANs, hosts, scans, map | Read and change | Read |
| Tag rules, ignore rules | Read and change | Read |
| Credentials | Read and change | No access |
| Collector tokens | Read and change | No access |
| Users | Read | No access |
A viewer does not see the buttons that change data.
How a user gets a role
| Group of the user | Role |
|---|---|
SHELLGRAPH_ADMIN_GROUP | admin |
SHELLGRAPH_VIEWER_GROUP (and not the admin group) | viewer |
| Neither group | The user cannot log in. |
The comparison of group names ignores upper case and lower case. The role is set again at each login. See Authentication and roles.