Permission Roles

A Permission Role represents a group of users who have their permissions restricted to some extent. Each role inherits permissions from its parent role, the role role.Admin is the ancestor of all roles. The role.Pro is a child of role.Admin. So if a feature is restricted in role role.Admin it will also be restricted in all the other roles.

The following drawing shows in overview format, what apps a specific role provides access to. Note that in Site configuration it is possible to further specify a minimum required role in order to access a given App from ROB-EX Portal.

Roles

role.Admin

The ROB-EX Admin user has permission to edit the plan and add/remove sites and create, manage and delete users.
An Admin user with the All sites permission can do everything for all sites in the plan
From v7.4.2: An Admin user limited to one or more specific sites, can only manage and delete users for the sites the user has permissions for. And this user cannot add or remove sites.

role.Pro:

The ROB-EX Pro user has permission to edit the plan including master data.
Does not have permission to add/remove sites and create, manage and delete users.

role.Pro-limited, role.Standard, role.Standard-limited:

The various roles like role.Pro-limited, role.Standard and role.Pro-limited are by default identical to role.Pro. These variants exist only to allow for a larger degree of customization in custom/roles.xml.

Note that the role.Standard-limited provides Planner rights in ROB-EX Desktop Planner and, from ROB-EX v7.2, ROB-EX Web Planner.

role.Light, role.Light-limited:

The Light-limited and Light user has permission to read/write the following fields in the plan. All other fields are read-only like the role.Viewer:
- BOM lines: Pegging to source operation/purchase, actual amount consumed.
- Production order: Text1-8, Boolean1-3, Integer1-2 and Calendar1-4
- Operation: Description, Text1-4, Boolean1-2, Double1
But only for operations assigned to a production order. Master routes or master operations cannot be edited.
Does have permission to open both Operator and Dashboard
Note: The role.Light-limited role also implements the roles: role.Web-Operator, role.Dashboard and role.Viewer.

role.Viewer:

The role provides view only access for ROB-EX Desktop Viewer and ROB-EX Web Viewer.
The user will not have permissions to change anything in the plan or edit any configuration related to other users. The user is able to change a few per-user preferences.

role.Web-Operator

This role added in v7.4.2. A special role which should be used for users that needs access only to Operator or Time Tracker, but does not need access to ROB-EX Web Viewer

role.Web-Dashboard

A special role which should be used for users that needs access only to Dashboard, but does not need access to ROB-EX Web Viewer or Operator.