The following table describes the available Ardia Core privileges.
Privilege | Description | Upon turning off the privilege |
---|---|---|
Data Explorer | ||
Open Data Explorer Application | Determines whether a role can access the Data Explorer application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
Manage Folder Access | Specifies whether a role with permission to access a folder can also manage access to that folder. | The Manage Access command is unavailable on the Data Explorer page. |
Manage Access for Any Folder | Specifies whether a role can manage folder access, including overriding the No Access permission to do so. | The Manage Access operation fails due to insufficient folder permissions. |
Archive Data | Specifies whether a role has the permission to archive data. | The Archive command is unavailable in the command bar and is disabled in the right-click shortcut menu of the Data Explorer page. |
Restore Data | Specifies whether a role has the permission to restore data. | The Restore command is unavailable in the command bar and is disabled in the right-click shortcut menu of the Data Explorer page. |
Upload Data | Specifies whether a role has the permission to upload data. | The Upload Files button is disabled on the Data Explorer page. |
Download Data | Specifies whether a role has the permission to download data. | The Download command is unavailable in the command bar and is disabled in the right-click shortcut menu of the Data Explorer page. |
Move Data | Specifies whether a role has the permission to move data. | The Move To command is unavailable in the command bar and is disabled in the right-click shortcut menu of the Data Explorer page. Additionally, the Ctrl + X shortcut does not work for the role. |
Copy Data | Specifies whether a role has the permission to copy data (excluding folders). | The Copy To command is unavailable in the command bar and is disabled in the right-click shortcut menu of the Data Explorer page. Additionally, The Ctrl + C shortcut does not work for the role. |
Delete Data | Specifies whether a role has the permission to delete data. | The Delete command is unavailable in the command bar and is disabled in the right-click shortcut menu of the Data Explorer page. |
Users and Roles | ||
Open Users and Roles Application | Determines whether a role can access the Users and Roles application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
Assign Privileges | Specifies whether a role has the permission to assign privileges. NOTE You cannot disable both Assign Privileges privilege and Open Users and Roles Application privilege for a role unless another role has both these privileges. At least one role must have both these privileges. | The Save button is disabled below the list of Ardia Core and application-specific permissions. |
Manage Users | Specifies whether a role has the permission to add and manage users. | The following commands are disabled on the Users page of the Users and Roles application:
|
Disable and Reactivate Users | Specifies whether a role has the permission to change the account status of users (disable or reactivate). | The Disable or Reactivate command is disabled on the Users page of the Users and Roles application. |
Delete Users | Specifies whether a role has the permission to delete users. | The Delete command is disabled on the Users page of the Users and Roles application. |
Manage Roles | Specifies whether a role has the permission to add and manage roles. | The following commands are disabled on the Roles page of the Users and Roles application:
|
Assign Users and Roles | Specifies whether a role has the permission to assign roles to users (and vice versa). | The Assign command on the Roles page of the Users and Roles application is disabled. Also, the following are unavailable:
|
Client Registration and Management | ||
Open Client Registration and Management Application | Determines whether a role can access the Client Registration and Management application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
Generate an Activation Code for a Client | Specifies whether a role has the permission to generate or remove registration code in the Client Registration and Management application. Also allows a role to render a registration code valid or invalid. | The Add Registration Code, Enable Codes, Disable Apps, and Remove Apps commands are disabled in the Client Registration and Management application. |
IdP Configuration | ||
Open IdP Configuration Application | Determines whether a role can access the IdP Configuration application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
Manage Identity Providers | Specifies whether a user can add and manage identity providers in the IdP Configuration application. | The Edit and Remove buttons are disabled in the existing IdP widgets. The Add button is disabled in the Add New IdP widget. |
Other applications | ||
Open Data Viewer Application | Determines whether a role can access the Data Viewer application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
Open Audit Trail Viewer Application | Determines whether a role can access the Audit Trail Viewer application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
Open Global Settings Application | Determines whether a role can access the Global Settings application. | The application is unavailable on the Ardia Platform. If the user with this role attempts to open the application using the application URL directly, a restricted access message appears. |
External applications | ||
Unlock Application Locked by Another User | Specifies whether a role has the permission to lock or unlock an application that is connected to the Ardia platform regardless of who locked it. | The user with this role cannot unlock an application connected to the Ardia platform that was locked by another user. |
Show Chromeleon Launcher | Specifies whether the Chromeleon CDS launcher is available on the Ardia Home page for a role.
| The launcher is unavailable on the Home page of the Ardia platform. |