User Roles

In the DataPortal system, every user has a defined role that determines their scope of permissions and access to system functions. Roles are assigned by the account administrator or — in the case of integrators — by the owner of the parent account.

Table of roles and permissions

Role	Description	Scope of permissions
Integrator	A role intended for companies or individuals integrating the DataPortal system with other solutions. The Integrator can create and manage subordinate accounts (sub-accounts), e.g. for their clients.	- Creating subordinate accounts (sub-accounts) - Managing the structure of projects and resources - Assigning roles to sub-account users - Full administrative access to all functions of its own account and sub-accounts
Administrator	Responsible for managing the company account and the resources, screens, reports, and users within it. Cannot create sub-accounts.	- Managing account users - Creating projects, folders, sources and tags, screens - Creating and managing reports - Configuring alarms and permissions - Full access to account resources
Manager	Responsible for managing resources, screens, and reports within the projects assigned to them. Cannot manage users or projects.	- Full access to resources within their assigned projects - Access to billing and inPoint orders for the entire account
Operator	A technical user who operates the system in day-to-day work. Has access only to SCADA (synoptic) screens, without the ability to modify the account structure.	- Viewing SCADA screens - Reading current data and alarm states - Ability to control executive devices from the screens - No ability to edit projects, resources, or configuration
Observer	A user with access limited to viewing data and reports (from screens). Can browse resources but cannot modify them.	- Viewing data, screens, and reports (from screens) - No ability to control executive devices

Role hierarchy

Integrator
   └── Administrator
         ├── Manager
         ├── Operator
         └── Observer

Creating subordinate accounts

Only the Integrator has the right to create subordinate accounts (sub-accounts).