Permissions Reference

Every permission as it appears in the API Permission Management card (Settings → Security Policy), grouped the way that card groups them, with what it allows and the default for each role. The Permission column is the exact label the card shows. Where earlier pages of this manual used a descriptive name of their own, it is listed under Also called so a search for either finds the row.

Legend: ✅ granted by default · ❌ not granted. The matrix is editable — see Permissions.

Pipeline Operations

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Pipelines	View pipelines	See pipelines and their definitions	✅	✅	✅	✅
Create Pipeline	Create pipelines	Create a pipeline	✅	✅	✅	❌
Edit Pipeline	Edit pipelines	Edit a pipeline; delete variables; change a variable's scope 1.0.8; query introspection	✅	✅	✅	❌
Delete Pipeline	Delete pipelines	Delete a pipeline	✅	✅	✅	❌
Execute Pipeline	Run pipelines	Run once; trigger a single node	✅	✅	✅	❌
Start/Stop Pipeline	Start and stop pipelines	Start/stop, and start-all/stop-all	✅	✅	✅	❌
Export Pipeline	Export pipelines	Export a pipeline	✅	✅	✅	❌
Import Pipeline	Import pipelines	Import a pipeline	✅	✅	✅	❌
Configure Shared Variables	Configure variable storage	Change the variable storage mode — temporary (volatile) or saved (persistent)	✅	✅	✅	❌

Connection Operations

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Connections	View connections	List and browse; connection health; SNMP walk/MIBs/traps; store-and-forward status, buffer limits and the quarantine list; historian settings; MQTT publishers and their status	✅	✅	✅	✅
Create Connection	Create connections	Create; OPC-UA discover/trust; upload MIBs; create an MQTT publisher	✅	✅	✅	❌
Edit Connection	Edit connections	Edit; test an AI credential; clear quarantine; historian designation, ownership and rebuilds; store-and-forward buffer limits, pause/resume, forwarding rate, live first and purge 1.0.8; quarantine read in full, retry, drop and export; edit an MQTT publisher, turn one on or off, release a publish quarantine	✅	✅	✅	❌
Delete Connection	Delete connections	Delete a connection or an MQTT publisher	✅	✅	✅	❌

Monitoring & Logs

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Execution Logs	View execution logs	Read execution and node-execution logs	✅	✅	✅	✅
View System Logs	View system logs	Read system logs	✅	✅	✅	✅
Clear Execution Logs	Clear execution logs	Delete execution logs	✅	❌	✅	❌
Clear System Logs	Clear system logs	Delete system logs	✅	❌	✅	❌
View All Executions	View all users' executions	See execution logs from all projects	✅	❌	❌	❌
Delete All Executions	Delete all users' executions	Delete execution logs from all projects	✅	❌	❌	❌
View Status Panel	View the status panel	Status panel; system and connection monitors	✅	✅	✅	✅

User Management

Permission	Also called	Gates	superadmin	admin	editor	viewer
Manage Users	Manage users	List users	✅	✅	❌	❌
Create User	Create users	Create a user	✅	✅	❌	❌
Edit User	Edit users	Activate/deactivate	✅	✅	❌	❌
Delete User	Delete users	Delete a user	✅	✅	❌	❌
Change User Role	Change a user's role	Change a user's role	✅	❌	❌	❌

System Settings

Permission	Also called	Gates	superadmin	admin	editor	viewer
Access Settings	Access settings	Settings area; API keys; realtime health; map/WMS read	✅	❌	❌	❌
Manage Permissions	Manage permissions	Edit the role-to-permission matrix	✅	❌	❌	❌
Manage Log Config	Configure system logging	System log configuration	✅	✅	❌	❌
Manage Auth Settings	Manage sign-in settings	Authentication policy, session lengths, Keep sessions across restarts and Sign out all sessions 1.0.8; external-content policy	✅	❌	❌	❌

Services

Permission	Also called	Gates	superadmin	admin	editor	viewer
Manage System Services	Manage services	Start/stop/restart services; storage and WMS configuration; Settings → Historian query concurrency and Integer Tag Interpolation 1.0.8 (interpolation)	✅	❌	❌	❌

Scripting

Permission	Also called	Gates	superadmin	admin	editor	viewer
Manage Script Sandbox	Manage the script sandbox	Script sandbox configuration and package installation	✅	❌	❌	❌

Namespace

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Namespace	View the namespace	Browse the tree, read tags, bindings, UDTs; historian series-cache statistics; for a Studio user, reading and adding historian annotations, and editing or deleting your own 1.0.8	✅	✅	✅	✅
Create Namespace Node	Create tags and folders	Create nodes; copy subtrees; create UDT instances	✅	✅	✅	❌
Edit Namespace Node	Edit tags and folders	Edit, move, rename, bulk-update nodes	✅	✅	✅	❌
Delete Namespace Node	Delete tags and folders	Delete nodes; bulk delete; delete UDT instances	✅	✅	✅	❌
Manage Namespace	Manage tags	Tag CRUD; UDT definitions, syncs, overrides, member context	✅	✅	✅	❌
Bind Protocol	Bind a tag to a protocol	Create, edit, enable, disable, delete protocol bindings	✅	✅	✅	❌
Import Namespace	Bulk import tags	Bulk import	✅	✅	✅	❌
Export Namespace	Export the namespace	Export the namespace	✅	✅	✅	❌
Refresh Namespace	Refresh the namespace	Refresh from source	✅	✅	✅	✅
Progressive Loading	Configure namespace optimisation	Change the namespace progressive-loading mode	✅	❌	❌	❌

Project

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Projects	View projects	Open a project	✅	✅	✅	✅
Create Project	Create projects	Create; import a project backup	✅	✅	✅	❌
Edit Project	Edit projects	Edit name, title, description	✅	✅	✅	❌
Delete Project	Delete projects	Delete a project	✅	✅	✅	❌
Manage Project	Manage projects	Enable, disable, trash, restore, purge; project backup export/restore	✅	✅	❌	❌

Designer

Permission	Also called	Gates	superadmin	admin	editor	viewer
Manage Designer	Manage the Designer	Designer authoring; view tree export/import	✅	❌	❌	❌
Manage File Library	Manage the library	File library management	✅	❌	❌	❌
Manage Symbol Library 1.0.8	Manage the symbol library	Import, edit and delete the global SVG symbols; draft a symbol with the AI assistant	✅	❌	❌	❌

Alarms

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Alarms	View alarms	Active list, journal, metrics, definitions	✅	✅	✅	✅
Acknowledge Alarms	Acknowledge alarms	Acknowledge, shelve, suppress, restore	✅	✅	✅	✅
Manage Alarms	Manage alarms	Create/delete definitions; per-tag enable; storage settings	✅	✅	✅	❌

Audit

Permission	Also called	Gates	superadmin	admin	editor	viewer
View Audit Log	View the audit journal	Read the audit journal; verify the chain	✅	✅	❌	❌
Manage Audit	Manage the audit journal	Configure audit storage	✅	❌	❌	❌

Backup

Permission	Also called	Gates	superadmin	admin	editor	viewer
Manage Backup & Restore	Manage backups	Gateway backup export and restore; importing a store-and-forward quarantine file 1.0.8	✅	❌	❌	❌

Identity & Access

Permission	Also called	Gates	superadmin	admin	editor	viewer
Manage LiveView Auth	Manage LiveView sign-in	Runtime (LiveView) identity sources	✅	❌	❌	❌

AI

Permission	Also called	Gates	superadmin	admin	editor	viewer
Use AI Assistant	Use the AI assistant	Chat, conversations, proposals	✅	✅	✅	❌
Manage AI Settings	Manage AI settings	AI configuration, credentials, per-connection access	✅	❌	❌	❌
Author AI Specialists	—	Create, edit and test AI Specialists	✅	✅	❌	❌

---

Notes on the defaults

Admins can read the audit journal but cannot configure it. View Audit Log is granted; Manage Audit is not. Audit-storage configuration is itself a security control.

Viewers can acknowledge alarms. Acknowledgement is an operator's core duty and changes no configuration. A role that sees alarms but cannot acknowledge them leaves a permanently red banner.

Editors can clear execution and system logs but admins cannot, by default. Editors own the pipelines that produce those logs; admins are steered toward the audit journal, which cannot be cleared at all.

Editors cannot author AI Specialists by default. A specialist decides how the assistant reasons for everyone who later selects it, which is nearer to deploying a script than to editing a project, so Author AI Specialists is granted deliberately.

Manage AI Settings is super-admin only because it exposes billable API credentials and the assistant's kill switch.

Manage Permissions is the meta-permission. Anyone holding it can grant themselves anything. Keep it on the super admin.

Next

→ Permissions