User Management
Roles & Permissions
Detailed breakdown of what each role can access and do
Sensorclouds has three user-facing roles with progressively scoped permissions.
Permission Matrix
| Capability | ADMIN | ENGINEER | USER |
|---|---|---|---|
| Manage tenant settings | |||
| Manage users | |||
| Create applications | |||
| View all applications | |||
| View own/assigned applications | |||
| Delete applications | |||
| Manage all devices | |||
| Manage own/assigned devices | |||
| Delete devices | |||
| Create device profiles | |||
| Delete device profiles | |||
| Create dashboards | |||
| View all dashboards | |||
| View own/assigned dashboards | |||
| Assign dashboards to any user | |||
| Assign dashboards to own user | |||
| Create alarm rules | |||
| Acknowledge/resolve alarms | |||
| View alarms (read-only) | |||
| Send commands | |||
| Interact with toggles | |||
| Upload firmware | |||
| Delete firmware | |||
| Manage OTA campaigns | |||
| View notifications | |||
| Edit own profile |
Engineer Access
Engineers can manage users but cannot manage tenant settings. They can only view and manage their own or assigned applications and devices. Engineers can assign dashboards to their own user. They cannot delete any resources. Device profiles are filtered by visibility — engineers see their own profiles plus TENANT-visible profiles from other users.
Role Assignment
- Tenant Admin can assign ADMIN, ENGINEER, or USER roles within their tenant
- Engineers can manage users but cannot assign roles
- Users cannot manage users or assign roles