Role permissions

The following sections list all the role permissions available in the Devo Platform, classified under the set categories. Each permission includes View and Manage levels to better define the actions that a custom role can perform. Read Managing roles to learn more about assigning permissions to custom roles.

Remember that the Admin and Owner roles grant all the permissions, while the No Privileges role is limited to modifying their own settings, receiving alerts, using custom finders, and other general actions.

Activeboard report scheduler

PERMISSION
Activeboard report scheduler

VIEW
Allows the user to see which Activeboards have a scheduled report, as well as use the dedicated filter to find them

MANAGE
Allows the user to create, edit or delete scheduled reports from Activeboards

Alerts

Alert configuration

PERMISSION
Alert configuration

Group permission

Granting this permission does not imply granting the permissions below.

VIEW
Grants the user view-only access to the Administration → Alert Configuration area

MANAGE
Allows the user to view, create, modify and delete alert definitions in Administration → Alert Configuration. The user can also define new alerts after running a search

PERMISSION
Email delivery methods
HTTP-JSON delivery methods
Jira delivery methods
Pagerduty delivery methods
Pushover delivery methods
Service Desk delivery methods
ServiceNow delivery methods
Slack delivery methods

VIEW
Grants the user view-only access to the Email / HTTP-JSON / Jira / Pagerduty / Pushover / Service Desk / ServiceNow / Slack tab in Administration → Alert configuration → Delivery Methods

MANAGE
Grants the user access to the Email / HTTP-JSON / Jira / Pagerduty / Pushover / Service Desk / ServiceNow / Slack tab in Administration → Alert configuration → Delivery Methods, and the ability to view and create new Email / HTTP-JSON / Jira / Pagerduty / Pushover / Service Desk / ServiceNow / Slack delivery methods

Triggered alerts

PERMISSION Triggered alerts Group permission Granting this permission does not imply granting the permissions below.		VIEW Allows the user to access Alerts → Alerts Dashboard and see the triggered alerts. Also, the user can see the Alerts tab in the Preferences area	MANAGE Allows the user to view and manage triggered alerts in Alerts → Alerts Dashboard. Also, the user can see the Alerts tab in the Preferences area
	PERMISSION Read/unread alert	VIEW N/A	MANAGE Allows the user to mark a triggered alert as read or unread. Also allows the user to change its priority

Applications

PERMISSION Application Gallery	VIEW N/A	MANAGE Grant the user access to Administration → Application Gallery and the ability to enable or disable applications for the domain
PERMISSION Built-in applications preferences at domain level	VIEW N/A	MANAGE Allows the user to manage application preferences at domain level (only for applications that have built-in preferences)
PERMISSION Tools Inactive by default Contact Devo if you need to access this feature in your domain.	VIEW Grant the user access to the Tools area of the application	MANAGE N/A

Data

Aggregation tasks

PERMISSION
Domain aggregation tasks

VIEW
Grants the user view-only access to the Aggregation Tasks tab in Administration → Data Management

MANAGE
Allows the user to edit, run/stop and delete tasks in the Aggregation Tasks tab of the Administration → Data Management area

Input data

PERMISSION Data upload	VIEW N/A	MANAGE Makes the Data upload area available for users to upload files
PERMISSION Relays and ELBs	VIEW Grants the user view-only access to Administration → Relays and ELBs	MANAGE Allows the user to manage and delete relays and ELBs in Administration → Relays and ELBs

my.app injections

PERMISSION
my.app injections

VIEW
Allows the user to access Administration → Data Management → Injections and view injections

MANAGE
Allows the user to access Administration → Data Management → Injections and view, edit or delete injections. The user can also create new injection tasks after running a search

OData

PERMISSION
OData

VIEW
Allows the user to access the Tokens tab in Administration → Credentials to view the existing OData feeds and tokens

MANAGE
Allows the user to access the Tokens tab in Administration → Credentials to view, edit and delete OData feeds and tokens. Also, the user can define new OData feeds after running a search

Data search

Finders

PERMISSION Finders Group permission Granting this permission does not imply granting the permissions below.			VIEW Allows the user to access the Data Search → Explore Your Data area and use the default finder. You can also select a custom finder as the default one for the role in the dropdown box that appears after selecting this permission	MANAGE Allows the user to access the Data Search → Explore Your Data area and use any available finder. Besides, the user can create, modify and delete custom finders
	PERMISSION Lookups Group permission Granting this permission does not imply granting the permissions below.		VIEW Allows the user to view upload lookups in the Lookup Management tab of the Data Search area. The user can also use these lookups to apply query operations in a search	MANAGE The user can access the Lookup Management tab in the Data Search area to view, create, edit or delete upload lookups. The user can also use these lookups to apply query operations in a search
		PERMISSION Query lookups Inactive by default Contact Devo if you need to access this feature in your domain.	VIEW The user can view query lookups in Data Search → Lookup Management and use them to apply query operations in a search	MANAGE Allows the user to view, modify, or delete query lookup tables in the Lookup Management tab of the Data Search area. The user can also define new query lookups in the search window after running a search and use them to apply query operations in a search
	Queries
		PERMISSION Domain search history	VIEW The user can access the most recently accessed queries in the domain in Data Search → Query History	MANAGE N/A
		PERMISSION Free text queries	VIEW N/A	MANAGE Allows the user to run free-text queries in Data Search → Explore Your Data → Free Text Query
		PERMISSION Global searches Inactive by default Contact Devo if you need to access this feature in your domain.	N/A	MANAGE Allows the user to perform global searches in Data Search → Explore Your Data → Global Search
		PERMISSION Query management	VIEW Allows the user to view running queries in the Query Management tab of the Data Search area	MANAGE Allows the user to view and manage running queries in the Query Management tab of the Data Search area
		PERMISSION Query priority Inactive by default Contact Devo if you need to access this feature in your domain.	VIEW N/A	MANAGE Allows the user to set both the default and maximum query priority for each new session. In the drop-down menus below, the user can set the range for the role.

Search Window

PERMISSION Custom tables	VIEW N/A	MANAGE Allows the user to create and manage custom tables after running a search
PERMISSION Data search download	VIEW Allows the user to download data from their searches	MANAGE N/A
PERMISSION Log autoparser	VIEW N/A	MANAGE Allows the user to use the log autoparser in my.app tables that are not parsed
PERMISSION Show/hide fields	VIEW N/A	MANAGE Allows the user to edit the default field configuration of a data table and save it as the default one for the domain
PERMISSION Stat count of searches Inactive by default Contact Devo if you need to access this feature in your domain.	VIEW Grants the user access to stat count of searches	MANAGE N/A
PERMISSION Subqueries Inactive by default Contact Devo if you need to access this feature in your domain.	VIEW Allow the user to perform subqueries in their searches	MANAGE N/A
PERMISSION Time control Inactive by default Contact Devo if you need to access this feature in your domain.	VIEW N/A	MANAGE Allows the user to choose the default reference time for tables that contain both creation and event dates

DeepTrace features

PERMISSION
DeepTrace features

VIEW
N/A

MANAGE
Allow the user to access Devo DeepTrace

Exchange

PERMISSION
Exchange

VIEW
The user can access Exchange to browse available content.

MANAGE
The user can access Exchange to install/uninstall content, as well as send content proposals. Note that the corresponding resource permission is also required (Activeboards, Alert configuration, Lookups, or Synthetic data).

Flow

PERMISSION Own flows Group permission Granting this permission does not imply granting the permissions below.		VIEW N/A	MANAGE The user can manage own Flows in the domain (create, read, update and delete)
	PERMISSION Domain flows	VIEW N/A	MANAGE The user can manage all Flows in the domain (create, read, update and delete)

Home

PERMISSION First steps	VIEW The user can view the First steps window	MANAGE The user can view and deactivate the First steps window
PERMISSION Home area Group permission Granting this permission does not imply granting the permissions below.	VIEW Makes the Home area visible to the user	MANAGE N/A

Machine learning

PERMISSION
Models

Inactive by default

Contact Devo if you need to access this feature in your domain.

VIEW
Allows the user to view models in the Machine Learning module or through the API

MANAGE
Allows the user to create, edit or delete models on the Machine Learning module or through the API

Multitenancy administration

Only in multitenant domains

The permissions in this group only appear for multitenant domains.

PERMISSION Multitenancy administration		VIEW N/A	MANAGE Allows the user access to the Overview tab of the Multitenancy area
	PERMISSION Custom data access	VIEW N/A	MANAGE Allows the user access to the Custom data access tab of the Multitenancy area

Notifications

PERMISSION
Notifications

VIEW
Makes the Notifications area available to the user

MANAGE
Allows the user to view and delete notifications

Resources

PERMISSION Activeboards		VIEW The user can access the Activeboards area and view their own Activeboards	MANAGE The user can access the Activeboards area, view, create, edit and delete their own Activeboards
PERMISSION User resources		VIEW N/A	MANAGE Allows the user to view, edit and delete all the domain resources (Activeboards, alerts, lookups...)

Security

PERMISSION Aggregation tokens	VIEW Allows the user to view existing Aggregations Task API tokens in the Authentication Tokens tab of the Administration → Credentials area	MANAGE Allows the user to view, create, edit and delete existing Aggregations Task API tokens in the Authentication Tokens tab of the Administration → Credentials area
PERMISSION Alert tokens	VIEW Allows the user to view existing alert tokens in the Authentication Tokens tab of the Administration → Credentials area	MANAGE Allows the user to view, create, edit and delete alert tokens in the Authentication Tokens tab of the Administration → Credentials area
PERMISSION API keys	VIEW N/A	MANAGE Allows the user to view, generate and delete API keys in the Access Keys tab of the Administration → Credentials area
PERMISSION API v2 tokens	VIEW Allows the user to view existing APIv2 tokens in the Authentication Tokens tab of the Administration → Credentials area	MANAGE Allows the user to view, create, edit and delete APIv2 tokens in the Authentication Tokens tab of the Administration → Credentials area
PERMISSION HTTP tokens	VIEW Allows the user to view existing HTTP tokens in the Authentication Tokens tab of the Administration → Credentials area	MANAGE Allows the user to view, create, enable/disable and delete HTTP tokens in the Authentication Tokens tab of the Administration → Credentials area. Take into account this permission will allow to see the list of users and tables in domain.
PERMISSION X.509 certs	VIEW Allows the user to view and download X.509 certificates in Administration → Credentials → X.509 Certificates	MANAGE Allows the user to view, generate, download and delete X.509 certificates in Administration → Credentials → X.509 Certificates

SOAR

new - delete after

Automations

PERMISSION
/wiki/spaces/LT/pages/672203010

VIEW
The user can access Automations and use it normally.

MANAGE
The user can manage Automations settings.