Understanding CRUD Permissions in R-COM Gateway
The R-COM Gateway platform uses Create, Read, Update, and Delete (CRUD) permissions to control access to individual modules. The meaning of each permission depends on the module, as described below.
Automation
Workflows
- Create: Create workflows and workflow versions.
- Read: View workflows, versions, and their configuration.
- Update: Edit workflow configuration and versions.
- Delete: Delete workflow versions and workflows.
Jobs
- Create: Rerun an event when the action is available to the role.
- Read: View workflow jobs, logs, source events, and job context.
- Update: Update job data where the action is available.
- Delete: Delete workflow job records where deletion is available.
Events
- Create: Rerun events where the action is available.
- Read: View events, their source data, and linked workflows.
- Update: Update event data where the action is available.
- Delete: Delete events where deletion is available.
Event Rules
- Create: Create Event Rules that route matching events to workflows.
- Read: View Event Rule configuration and routing conditions.
- Update: Change Event Rule settings, trigger configuration, and workflow routing.
- Delete: Delete Event Rules.
Scheduler
- Create: Create schedules.
- Read: View schedules and their configured frequency.
- Update: Change schedule details and timing.
- Delete: Delete schedules.
Custom Errors
- Create: Create custom error definitions.
- Read: View custom error definitions.
- Update: Change custom error details.
- Delete: Delete custom error definitions.
Agents
Manage Agents
- Create: Register a new Agent.
- Read: View Agents, their status, configuration, processes, endpoints, and logs.
- Update: Change Agent configuration, power and monitoring settings, and assigned processes.
- Delete: Delete an Agent after it is powered off.
Process Templates
- Create: Create Process Templates and template versions.
- Read: View Process Templates, versions, and their component configuration.
- Update: Change Process Template configuration and versions.
- Delete: Delete Process Templates or versions.
Components
- Create: Upload components.
- Read: View uploaded components.
- Update: Upload components.
- Delete: Delete uploaded components.
Manage Agent MQTT
- Create: Create the shared Agent MQTT Broker configuration where the action is available.
- Read: View the shared Agent MQTT Broker configuration.
- Update: Change the shared Agent MQTT Broker configuration.
- Delete: Remove the shared Agent MQTT Broker configuration where the action is available.
Data
Object Schemas
- Create: Create Object Schemas and their attributes.
- Read: View Object Schema configuration and attributes.
- Update: Change Object Schema configuration and attributes.
- Delete: Delete Object Schemas or attributes.
Object Types
- Create: Create Object Types.
- Read: View Object Types and their Object Schema assignments.
- Update: Change Object Type details and assignments.
- Delete: Delete Object Types.
Custom Attributes
- Create: Create custom attributes.
- Read: View custom attributes.
- Update: Change custom attribute configuration.
- Delete: Delete custom attributes.
Manage Storage
- Create: Create storage numbers, locations, areas, and bins.
- Read: View the storage hierarchy and stored objects.
- Update: Change storage names, relationships, and other details.
- Delete: Delete storage entries.
Table Settings
- Create: Create saved table settings.
- Read: View saved table settings.
- Update: Change saved table settings.
- Delete: Delete saved table settings.
Integrations
REST API
- Create: Create REST API endpoints and synchronize endpoints.
- Read: View REST API endpoint configuration and routes.
- Update: Change endpoint configuration and route settings.
- Delete: Delete REST API endpoints.
MQTT
- Create: Create MQTT client configurations.
- Read: View MQTT client configurations and topics.
- Update: Change MQTT client settings and topic subscriptions.
- Delete: Delete MQTT client configurations.
Custom UI
Manage UIs
- Create: Create Custom UIs and UI versions.
- Read: View Custom UI configuration, code, versions, and access settings.
- Update: Change Custom UI code, configuration, and access settings.
- Delete: Delete Custom UIs or UI versions.
Custom Maps
Manage Maps
- Create: Create Custom Maps.
- Read: View Custom Map configuration and versions.
- Update: Change Custom Map configuration and versions.
- Delete: Delete Custom Maps or versions.
Data Migration
Import / Export
- Create: Create configuration import and export jobs.
- Read: View import and export jobs, including their status and reports.
- Update: Change an import or export job where the action is available.
- Delete: Delete import and export jobs where the action is available.
Packages
- Create: Create or upload packages.
- Read: View packages, their contents, and status.
- Update: Change package details where the action is available.
- Delete: Delete packages.
Package Approval
- Create: Approve a package.
- Read: View packages awaiting approval and their approval status.
- Update: Change package approval data where the action is available.
- Delete: Remove package approval data where the action is available.
Config Migration
- Create: Create configuration export packages and import jobs.
- Read: View configuration exports, imports, and migration reports.
- Update: Change migration job details where the action is available.
- Delete: Delete configuration export packages or migration jobs.
Mobile
Mobile Projects
- Create: Not available in the Gateway UI.
- Read: View Mobile Projects where access is granted.
- Update: Not available in the Gateway UI.
- Delete: Delete Mobile Projects where the action is available.
Mobile Files
- Create: Not available in the Gateway UI.
- Read: View Mobile Files where access is granted.
- Update: Not available in the Gateway UI.
- Delete: Delete Mobile Files where the action is available.
Mobile Devices
- Create: Not available in the Gateway UI.
- Read: View Mobile Devices where access is granted.
- Update: Not available in the Gateway UI.
- Delete: Delete Mobile Devices where the action is available.
Mobile Assignments
- Create: Not available in the Gateway UI.
- Read: View Mobile Assignments where access is granted.
- Update: Not available in the Gateway UI.
- Delete: Delete Mobile Assignments where the action is available.
Administration
Licence
- Create: Upload and activate a licence.
- Read: View the active licence and its status.
- Update: Replace or update the active licence.
- Delete: Remove a licence where the action is available.
User Access
Users
- Create: Create user accounts.
- Read: View user accounts and their details.
- Update: Change user details, account status, roles, and access groups.
- Delete: Delete user accounts.
Roles
- Create: Create roles.
- Read: View roles and their configuration.
- Update: Change role details and custom permissions.
- Delete: Delete roles.
Permissions
- Create: Grant Create access for a module to the selected role.
- Read: View the selected role's permission matrix.
- Update: Change the selected role's permissions.
- Delete: Remove a module permission from the selected role.
Access Groups
- Create: Create Access Groups.
- Read: View Access Groups, members, and group variables.
- Update: Change Access Group details, membership, and group variables.
- Delete: Delete Access Groups.
Basic Auth
- Create: Create Basic Auth accounts for external applications.
- Read: View Basic Auth account details.
- Update: Change Basic Auth account credentials and access.
- Delete: Delete Basic Auth accounts.
Access Tokens
- Create: Create access tokens.
- Read: View access token details.
- Update: Change access token details where the action is available.
- Delete: Revoke access tokens.
Audit Logs
- Create: Not available; Audit Logs are read-only.
- Read: View Audit Log entries and detailed changes.
- Update: Not available; Audit Log entries cannot be changed.
- Delete: Not available; Audit Log entries cannot be deleted from this page.
Unlock User
- Create: Not available.
- Read: View whether a user account is locked.
- Update: Unlock a user account.
- Delete: Not available.
System Config
Client Details
- Create: Not available; the client configuration already exists.
- Read: View client settings.
- Update: Change client details, MQTT configuration, global data, and client preferences.
- Delete: Not available.
Auth Systems
- Create: Create an authentication system.
- Read: View configured authentication systems.
- Update: Change authentication system connection details and mappings.
- Delete: Delete an authentication system.
Translation
- Create: Create translations.
- Read: View translations.
- Update: Change translations.
- Delete: Delete translations.
Storage Providers
- Create: Create storage providers.
- Read: View storage provider configuration.
- Update: Change storage provider configuration.
- Delete: Delete storage providers.
Secret Store
- Create: Create secrets.
- Read: View secret names and configuration.
- Update: Change secret values and configuration.
- Delete: Delete secrets.
Preferences
- Create: Create preferences where the action is available.
- Read: View client preferences.
- Update: Change client preferences.
- Delete: Delete preferences where the action is available.
Maintenance
Maintenance Mode
- Create: Not available.
- Read: View the current Maintenance Mode status.
- Update: Enable or disable Maintenance Mode.
- Delete: Not available.
Data Cleanup
- Create: Create data cleanup configurations.
- Read: View data cleanup configuration.
- Update: Change data cleanup configuration.
- Delete: Delete data cleanup configuration.
Other Modules
Client Level Filter Views
- Create: Create Client Level Filter Views.
- Read: Not available.
- Update: Not available.
- Delete: Delete Client Level Filter Views.
warning
Deletion actions can be irreversible and may affect related data. Review the affected configuration before deleting an item.