Overview

The initial administrator user is a global administrator. This user is granted all permissions , which allows the user to access all data and functionality. New users are considered global administrators when they are not assigned to a group.

See Access Control: Groups, Roles, and Permissions for more information.

Setup

Create Group/Tenant

The first user created is considered the group administrator (Group/Tenant Administrator).
The option to assign a role in not available since the first user is expected to have all permissions.

Create Sub-Group / Sub-Tenant

This is needed if you wish to create users with specific roles/permissions.
The parent group selected will be the administrator.

Group/Tenants cannot be deleted once created.

Create Role

A role allows you to associate specific permissions to access DryvIQ features.

Create User

To create a user with all permissions, select the parent Group/Tenant.
To create a user assigned a specific role with permissions, select the child Group/Tenant.
- When logging in to the DryvIQ user interface, the user will only have access to features as defined by the permissions assigned to their role.
- When using the REST API through Postman, update your user and password environment variables to match your created user. Be sure to get a new access token. Refreshing the access token may result in an error.

Permission Options | Definitions

Connections

Permission	Description

Permission	Description
List Connections	The Connections page is visible; the user can list connections via rest call GET {{url}}v1/connections. In the user interface, options to edit/delete a connection is presented, but user with only this role will be denied action.
Manage Connections	Only the Dashboard is visible if this permission is used in isolation. This permission is only applicable when used in combination with List Connections.
Read Content	The user can browse content through the REST API (Similar to v3 Navigator).
Write/Delete Content	Th user can upload content to the connection.

Jobs

Permission	Description

Permission	Description
List Jobs	The Dashboard, Reports and Jobs are visible, but the user cannot start/stop/pause jobs, reset stop policies, manage schedules, rename jobs, or delete jobs.
Manage Jobs	Only the Dashboard is visible. This permission is only applicable when used in combination with List Jobs List Jobs + Manage Jobs allows the user to run jobs, manage job schedules, rename jobs, duplicate/clone jobs, and delete jobs.
Control Jobs (Start/Stop/Pause)	Only the Dashboard is visible. This permission is only applicable when used in combination with List Jobs. List Jobs + Control Jobs allows the user to see and run jobs. All other job actions will be disabled.
Manage Reports	This permission is only applicable when used in combination with List Jobs.

Security

Permission	Description

Permission	Description
List users and Groups	The user can view a list users. The user cannot create, edit, or manipulate users.
Manage users and Groups	The user can manage user lists, create users, edit users, and create/edit Groups. The user cannot create/edit Roles.
Manage Access Rights	The user can create/edit Roles. The user cannot create Groups or create/edit/manipulate individual users.

List All Permissions

"type": "permission_categories",
    "permission_categories": [
        {
            "id": "4f363d230da046108b00a4586ce75055",
            "name": "Connections",
            "permissions": [
                {
                    "id": "47c6cd5954f041df8d79e1972cc1ce3b",
                    "name": "List Connections"
                },
                {
                    "id": "294eee9539354739b194da1a879bc163",
                    "name": "Manage Connections"
                },
                {
                    "id": "0a92ab0e02414a51b03497490df76ada",
                    "name": "Read Content"
                },
                {
                    "id": "989d1df3d6af47afadb0a74e42efc92c",
                    "name": "Write/Delete Content"
                }
            ]
        },
        {
            "id": "8081309e5b3a454c9156126ba57b18b5",
            "name": "Remote Sites",
            "permissions": [
                {
                    "id": "ffee260e389a42f7b23ce75b46b79e2e",
                    "name": "List Remote Sites"
                },
                {
                    "id": "5e97f402d6b14a599eeba998d5d63044",
                    "name": "Manage Remote Sites"
                },
                {
                    "id": "64ce9e42a7ac402086bf229c346bc533",
                    "name": "Invoke Remote Sites"
                },
                {
                    "id": "1f0d640960f949bda50f1eed7a7fa9ba",
                    "name": "Establish Remote Sites"
                }
            ]
        },
        {
            "id": "a2f88280c80c475a908d44ea752c0d94",
            "name": "Jobs",
            "permissions": [
                {
                    "id": "bbd25a404cdc4e01baabd0b79394cbd8",
                    "name": "List Jobs"
                },
                {
                    "id": "d9507ec76bf7414aa8a74a0c88c32a48",
                    "name": "Manage Jobs"
                },
                {
                    "id": "3560a25976504967bcd48a7e668a07a8",
                    "name": "Control Jobs (i.e. Start/Stop/Pause)"
                },
                {
                    "id": "86b29346112b48528f8e4aeed0137262",
                    "name": "Manage Templates"
                },
                {
                    "id": "ff1c134c1c204b5f8afc47155498aa5f",
                    "name": "Manage Reports"
                }
            ]
        },
        {
            "id": "ab70847b71c042b1bae66461f5dda04c",
            "name": "Security",
            "permissions": [
                {
                    "id": "915fb2c972a3479ab3272b62507b7300",
                    "name": "List Users and Groups"
                },
                {
                    "id": "e7e4f17053fa41489dfb026d18d6bc40",
                    "name": "Manage Users and Groups"
                },
                {
                    "id": "5a16a060c35d467882c007979926bdfe",
                    "name": "Manage Access Rights"
                }

DryvIQ Migrate

Users and Groups Permission Definitions