Managed Roles

This page was machine-translated. The Japanese page is the official version.

Managed roles are maintained by Idein and have predefined sets of permissions.

• Admin: Full access to all resources managed by the group.
• Developer: Full access to resources needed for development, including devices, Acts, and Casts.
• Kitting: Permissions needed for kitting, such as operating devices.
• Member: Read-only permissions.
• No Access: No permissions for any resources managed by the group.

Operations

The operations allowed for each role are:

Operation	Admin	Developer	Kitting	Member	No Access
Device	——	——	——	——	——
List devices	✓	✓	✓	✓
List device tags	✓	✓	✓	✓
Register device	✓	✓	✓
Take photo	✓	✓	✓
Execute Custom Command	✓	✓	✓
Blink LED	✓	✓	✓	✓
Execute firmware update	✓	✓	✓
Reboot	✓	✓	✓
Shutdown	✓	✓	✓
Execute major firmware update	✓	✓	✓
Update device status	✓	✓	✓
View device details	✓	✓	✓	✓
View photos taken	✓	✓	✓	✓
Get Custom Command results	✓	✓	✓	✓
View Device Logs	✓	✓	✓	✓
View Event Logs	✓	✓	✓	✓
View Act Logs	✓	✓	✓	✓
View Acts on devices	✓	✓	✓	✓
Edit device name	✓	✓	✓
Edit device hostname	✓	✓	✓
Edit access points	✓	✓	✓
Edit firmware update prevention setting	✓	✓	✓
Edit firmware config	✓	✓	✓
Edit auto reboot setting	✓	✓	✓
Edit mDNS setting	✓	✓	✓
Turn On/Off Dev Mode	✓	✓
Edit device tags	✓	✓	✓
Edit Acts on devices	✓	✓	✓
Unregister	✓	✓	✓
Uninstall Acts from devices	✓	✓	✓
App	——	——	——	——	——
List apps	✓	✓	✓	✓
Create app	✓	✓
View app details	✓	✓	✓	✓
Update app	✓	✓
Delete app	✓	✓
Act	——	——	——	——	——
List Acts	✓	✓	✓	✓
Create Act	✓	✓
View Act details	✓	✓	✓	✓
Update Act	✓	✓
Delete Act	✓	✓
Cast	——	——	——	——	——
List Casts	✓	✓	✓	✓
Create Cast	✓	✓
View Cast details	✓	✓	✓	✓
Update Cast	✓	✓
Delete Cast	✓	✓
SystemCast	——	——	——	——	——
List System Casts	✓	✓	✓	✓
Create System Cast	✓	✓
View System Cast details	✓	✓	✓	✓
Update System Cast	✓	✓
Delete System Cast	✓	✓
Group	——	——	——	——	——
View group details	✓	✓	✓	✓
Update group name	✓
GroupMember	——	——	——	——	——
List group members	✓	✓	✓	✓
View group member details	✓	✓	✓	✓
Media	——	——	——	——	——
List media	✓	✓	✓	✓
Create media	✓	✓
Delete media	✓	✓
ApiToken	——	——	——	——	——
List API Tokens	✓	✓	✓	✓
Create API Token	✓	✓	✓	✓
View API Token details	✓	✓	✓	✓
Delete API Token	✓	✓	✓	✓
Edit API Token description	✓	✓	✓	✓
DeveloperToken	——	——	——	——	——
List Developer Tokens	✓	✓	✓	✓
Create Developer Token	✓	✓
Delete Developer Token	✓	✓

Only the Admin role can perform the following operations:

• Delete the group.
• Invite members.
• Change members’ roles.
• Remove other members from the group.
• Delete API Tokens created by other members.
• Delete Developer Tokens created by other members.
• Create, edit, and delete roles and policies.

Only the user who created an API Token can edit its description. Even an Admin cannot edit the description of a token created by another member.

For more granular access control, create a custom role and attach a custom policy.