Roles are sets of permissions that can be granted to users and teams to which they are assigned. Such a set of permissions assigned to a role can be configured as required.
The permissions assigned to a role define the features and functionalities that can be accessed by the users with that role and are inherited by all users or teams to which it is assigned. Each role has a list of permissions and a list of associated groups.
For example, the "adm_administration" permission that is assigned to the Administrator role allows the users to access the Configuration section in the Frontline Command Center. In addition to that, groups are used to match roles to specific users.
User interface
- Create Role: Allows you to create new custom roles
- Import: Allows you to import roles from a different server instance
- Export: Allows you to export roles to a different server instance
- Duplicate Role: Allows you to duplicate existing roles
- Delete Role: Allows you to delete existing roles
- Dropdown menu: Allows you to select a role to configure
- Search bar: Allows you to find permissions quickly
Note: Permissions are always granted to users and teams indirectly via the assigned roles. Permissions cannot be assigned directly to a user or team. If the team is deleted or the user is unassigned from the team, all inherited permissions from that team are revoked.
Standard Roles & Permissions
Ai Studio
AiStudio's role enables users to access Ai Studio projects.
- ai-studio: Allows you to control AI Studio projects
- fa_read: Allows you to read Frontline Apps permissions
- home_dashboard_access: Allows you to access to Dashboard home page
Administrator
Administrator role enables Frontline Command Center users; such as Administrators, Shift or IT Managers. They define the roles and permissions to administrate users and teams, for using devices and applications.
- adm_call_log_delete: Allows you to make delete call logs irreversible
- api: Allows you to access API functions
- base_qrcode_generator: Allows you to generate new QR codes
- base_qrcode_view: Allows you to see all QR codes
- devices_broadcast: Allows you to contact a device
- devices_edit: Allows you to edit an existing device
- devices_export: Allows you to export the list of devices
- devices_reset: Allows you to reset a device
- fa_admin: Allows you to have administrative permissions
- fa_read: Allows you to read Frontline Apps permissions
- gamification_admin: Allows you to have gamification administration
- user_login_code: Allows you to access current user details and the login QR code with only one one-time login
- user_management: Allows you to access the user management
- adm_administration: Allows you to access Configuration
- adm_application management_config: Allows you to configure new applications
- adm_application management_delete: Allows you to delete the existing applications
- adm_application management_manage_unused: Allows you to manage the existing unused applications
- adm_application management_pairing: Allows you to access the device pairing QR code
- adm_application management_uninstall: Allows you to uninstall the existing application
- adm_application management_upload: Allows you to upload new application bundles
- adm_application management_view: Allows you to access Application Management
- adm_devices_scanners: Allows you to access the external scanners page
- adm_error_reporting_delete: Allows you to delete an error report
- adm_error_reporting_export: Allows you to export the error logs
- adm_error_reporting_update_state: Allows you to update the state of an error report
- adm_error_reporting_view: Allows you to access Error Reports
- adm_org_management: Allows you to customize your visual settings
- adm_preferences: Allows you to access to the Domain Preferences
- adm_roles_&_permissions_view: Allows you to access Roles & Permission Management
- adm_roles_create_update: Allows you to add new or edit existing roles
- adm_roles_delete: Allows you to delete existing roles
- adm_roles_reset: Allows you to reset a selected role
- adm_roles_reset_all: Allows you to reset all roles
- adm_system_api: Allows you to access the API
- adm_system_legal: Allows you to access to legal information
- adm_system_license: Allows you to access the license information
- adm_system_license_add: Allows you to add a new license pool
- adm_system_view: Allows you to access the System Information
- adm_teams_create: Allows you to add a new team
- adm_teams_delete: Allows you to delete existing items
- adm_teams_edit: Allows you to edit a team
- adm_teams_view: Allows you to access to the teams
- adm_tiles_management: Allows you to customize tiles inside the dashboard
- adm_users_create: Allows you to add a new user
- adm_users_delete: Allows you to delete an existing user
- adm_users_edit: Allows you to edit an existing user
- adm_users_lock: Allows you to lock an existing user
- adm_users_loginqr: Allows you to view and print login QR codes
- adm_users_view: Allows you to view all users
- adm_wifi_add: Allows you to add new Wi-Fi QR codes
- adm_wifi_delete: Allows you to delete existing Wi-Fi QR codes
- adm_wifi_export: Allows you to export a Wi-Fi QR code
- adm_wifi_view: Allows you to access the Wi-Fi QR codes
- device_screenshot: Allows you to access client screen mirroring
- base_licensed_permissions: Allows you to grant the base permissions for licensed users
- home_dashnoard_access: Allows you to access the home page dashboard
- adm_devices_show_only_devices: Allows you to filter only the online devices
- devices_view: Allows you to access the device list
Creator
Creator role enables Frontline Command Center users such as project supervisors or administrators who create workflows that can be run through smart glasses or smartphones.
- ai-component-expert: Allows you to use AI models in AI components
- ai-model-access: Allows you to upload inference images
- api: Allows you to access the API functions
- client_management: Allows you to access client management
- creator_export: Allows you to export workflows and components
- creator_import: Allows you to import workflows and components
- creator_preview_mode: Allows you to access the preview mode
- creator_publish: Allows you to publish workflows and components
- creator_save: Allows you to save workflows
- creator_workflow_management: Allows you to create, rename, and delete workflows
- creator_workflow_read: Allows you to read and open workflows
- datasources_all: Allows you to access the data source page
- fa_read: Allows you to read Frontline Apps
- show_all_device_users: Allows you to view all users
- user_login_code: Allows you to access current user details and the login QR code with only one-time login
- wf_documentation: Allows you to access the deprecated workflows results page
- wf_reports: Allows you to access the workflow reporting page
- wftask: Allows you to access the workflow task API
- wftaskcreate: Allows you to create workflow tasks page
- workflow_generation: Allows you to have the workflow generation feature for task results
- device_screenshot: Allows you to access the client screen mirroring
- app_creator: Allows you to access Frontline Creator
- base_licensed_permissions: Allows you to grant the base permissions for licensed users
- wp_menu-preview-mode: Allows you to access the preview mode menu
- datasource_view: Allows you to access xInspect data source
Developer
Developer role enables users to access advanced mode.
- ai-model-access: Allows you to upload inference images
- api: Allows you to access the API functions
- client_management: Allows you to access client management
- creator_advanced-mode: Allows you to create and edit workflow components
- creator_console_debug: Allows you to print certain information on the web console for debug purposes
- creator_debug: Allows you to access debug workflows while using Frontline Creator
- creator_export: Allows you to export workflows and components
- creator_import: Allows you to import workflows and components
- creator_preview_mode: Allows you to access the preview mode
- creator_publish: Allows you to publish workflows and components
- creator_save: Allows you to save workflows
- creator_workflow_management: Allows you to create, rename, and delete workflows
- creator_workflow_read: Allows you to read and open workflows
- datasources_all: Allows you to access the data source page
- devices_log: Allows you to request device logs
- fa_create: Allows you to create Frontline Apps permissions
- fa_read: Allows you to read Frontline Apps
- show_all_device_users: Allows you to view all users
- user_login_code: Allows you to access current user details and the login QR code with only one one-time login
- wf_documentation: Allows you to access the deprecated workflow results page
- wf_reports: Allows you to access the workflow reporting page
- wf_task: Allows you to access the workflow task API
- wftaskcreate: Allows you to create a workflow tasks page
- workflow_generation: Allows you to access the workflow generation feature for task results
- device_screenshot: Allows you to access client screen mirroring
- app_developer: Allows you to access Frontline Developer
- wp_menu_preview-mode: Allows you to access the preview mode menu
- datasources_view: Allows you to access xInspect data sources
- base_licensed_permissions: Allows you to grant the base permissions for licensed users
- wp_menu_preview_mode: Allows you to access the preview mode menu
Spatial Teamcenter
- spatial_teamcenter_add_on: Allows you to get access to Siemens Teamcenter Add-On
Assist
Assist role enables users to have remote support via web browsers, smartphones smart glasses.
- ai-model-access: Allows you to upload inference images
- ai-xassist-sign: Allows you to use Assist sign detection
- ai-xassist-track: Allows you to use Assist AI Tracker
- api: Allows you to access API functions
- azure_vision_ocr: Allows you to have Azure OCR proxy endpoint
- call: Allows you to make Assist calls
- fa_read: Allows access to Frontline Apps read permission
- user_login_code: Allows you to access the current user details and QR Code generation (one time login only)
- user_management: Allows you to access user management
- home_dashboard_access: Allows you to access Assist Dashboard
- home_dashboard_show_device_flow: Allows you to view the device link on the dashboard
- wp_gen_get-app-config: Allows you to get application configuration
- wp_gen_hmd-general: Allows you to access general functionalities
- wp_gen_work-offline: Allows you to work offline
- wp_menu_call_support_call-support: Allows you to access the call support menu
- wp_menu_call_support_call-support-status: Allows you to view call support status
- wp_menu_call_support_open-calls: Allows you to view the open calls menu
- wp_menu_hmd-menus: Allows you to access the Frontline Workplace menu
- wp_menu_settings: Allows you to access the settings menu
- wp_workplace: Allows you to access the Frontline Workplace app
- xa_icall_ar_drawing_ar_markers: Allows you to use the AR markers during the call
- xa_icall_board_whiteboard: Allows you to view the whiteboard
- xa_icall_can_remote_control: Allows you to use the remote flashlight
- xa_icall_can_take_snapshots: Allows you to take snapshots
- xa_icall_chat_can_download: Allows you to download media and files from chat
- xa_icall_chat_can_edit: Allows you to edit captions of the images shared in chat
- xa_icall_chat_can_read: Allows you to view the chat
- xa_icall_chat_can_upload: Allows you to upload media and files in chat
- xa_icall_chat_can_write: Allows you to send text messages in chat
- xa_icall_chat_translate-chat-messages: Allows you to translate chat messages
- xa_icall_contacts_add-participants: Allows you to invite more participants to the ongoing call
- xa_icall_contacts_contacts: Allows you to view contacts
- xa_icall_edit_call_details: Allows you to edit call details
- xa_icall_inside-the-call: Allows you to join calls
- xa_icall_live_enable-on-camera-stream: Allows you to enable your camera stream
- xa_icall_live_record-videos-in-calls: Allows you to start and stop the recording of video calls
- xa_icall_live_share-the-desktop/screen: Allows you to share your screen (FCC)
- xa_icall_live_use-live-pointer: Allows you to use the Pointer
- xa_icall_live_use-the-ar-marker: Allows you to use the AR markers
- xa_icall_ocr: Allows you to use the OCR feature
- xa_ocall_call-management-editor: Allows you to access the call management editor
- xa_ocall_call-templates: Allows you to access the call templates
- xa_ocall_calllog_call-logs: Allows you to access the call logs
- xa_ocall_calllog_delete-media: Allows you to delete media from call logs
- xa_ocall_calllog_download-media: Allows you to download media from call logs
- xa_ocall_calllog_export-call-log: Allows you to export call logs
- xa_ocall_calllog_see-all-call-logs: Allows you to see all call logs
- xa_ocall_calllog_see-own-call-logs: Allows you to see your call logs
- xa_ocall_contact_list-contact-list: Allows you to access the contact list and initiate calls
- xa_ocall_contact_list_invite-guest-users: Allows you to invite guest users
- xa_ocall_create_conference: Allows you to create conferences
- xa_ocall_create_ics_file: Allows you to create ics files
- xa_ocall_desktop_notifications: Allows you to have Assist incoming call notifications on desktop
- xa_ocall_outside-the-call: Allows you to access Assist functionalities outside of a call
- xa_ocall_phonebook-editor: Allows you to access the phonebook editor
- xa_ocall_reports_create-service-reports: Allows you to create service reports
- xa_ocall_reports_delete-service-reports: Allows you to delete all service reports
- xa_ocall_reports_edit-service-reports: Allows you to edit all service reports
- xa_ocall_reports_read-service-reports: Allows you to read all service reports
- xa_ocall_reports_see_all_service-reports: Allows you to view all service reports
- xa_ocall_reports_service-reports: Allows you to access service reports
- xa_ocall_xassist_scheduled_call: Allows you to create scheduled calls
- xa_ocall_xassist-dashboard: Allows you to access Assist Dashboard
- xa_ocall_xassist-dashboard-statistics: Allows you to access Assist Dashboard statistics
- xa_xassist: Allows you to access Assist
Inspect
Inspect role enables users to access Inspect tasks and templates.
- ai-worker: Allows you to upload inference images
- api: Allows you to access the API functions
- azure_speech_to_text: Allows you to access Azure speech to text API
- azure_vision_orc: Allows you to have Azure OCR proxy endpoint
- datasource_create_or_edit: Allows you to create or edit new data sources
- datasources_delete: Allows you to delete an existing data source
- datasources_export: Allows you to export an existing data source
- devices_broadcast: Allows you to contact a device
- fa_read: Allows you to read Frontline Apps
- tasks_view: Allows you to view Tasks
- user_login_code: Allows you to access current user details and the login QR code with only one one-time login
- wf_task: Allows you to access the workflow task API
- adm_devices_scanners: Allows you to access the external scanners page
- adm_users_view: Allows you to view all users
- device_screenshot: Allows you to access the client screen mirroring
- app_spatial_editor: Allows you to access Spatial Editor
- app_spatial_workplace: Allows you to access Spatial Workplace
- spatial_cad_import: Allows you to import CAD models by using a commercial 3rd party library
- spatial_live_editor: Allows you to edit workflows on your mobile device
- spatial_object_tracking: Allows you to use object tracking using a commercial 3rd party library
- spatial_teamcenter_add_on: Allows you to get access to the Siemens Teamcenter Add-on
- spatial_workflow_delete: Allows you to delete Spatial Workplaces
- home_dashboard_access: Allows you to access the home page dashboard
- home_dashboard_show_device_flow: Shows the device flow link on the dashboard
- show_task_details_comments: Allows you to have access to view comments for task
- show_task_details_steps: Allows you to view step details
- show_task_duration: Shows task duration and timestamps
- tasks_create_or_edit: Allows you to create and edit templates
- templates_delete: Allows you to delete templates
- templates_export: Allows you to export templates
- templates_view: Allows you to access to the template page
- wp_gen_fetch-datasource: Allows you to fetch data source
- wp_gen_get-app-config: Allows you to get application configuration
- wp_gen_hdm-general: Allows you to access the general functionality
- wp_gen_work-offline: Allows you to work in offline mode
- wp_menu_hdm-menus: Allows you to access the Workplace menus
- wp_menu_my_my-tasks: Allows you to access the my tasks menu
- wp_menu_new-task: Allows you to access the new task menu
- wp_menu_scan-task: Allows you to access the scan task menu
- wp_menu_settings: Allows you to access the settings menu
- wp_workplace: Allows you to access the Workplace App
- xa_icall_can_remote_control: Allows you to use the remote flashlight
- xa_icall_chat_can_read: Allows you to view the chat
- xa_icall_chat_can_write: Allows you to send text messages in the chat
- xa_icall_contacts_contacts: Allows you to view the contacts
- xa_icall_info_edit_call_details: Allows you to change the title, description, and tags during the call
- xa_icall_inside-the-call: Allows you to join the calls
- xa_icall_live_enable-own-camera-stream: Allows you to enable your own camera stream
- xa_ocall_contact_list_contact-list: Allows you to access the contact list and initiate calls
- xa_ocall_xassist-dashboard: Allows you to access the Assist Dashboard
- xa_ocall_xassist-dashboard-statistics: Allows you to access the Assist Dashboard statistics
- adm_devices_show_only_devices: Allows you to filter only online devices
- datasoruces_view: Allows you to access to xInspect data sources
- devices_view: Allows you to access to the device list
- xi_xinspect: Allows you to access xInspect
Make
Make role enables users to access Make tasks and templates.
- ai-worker: Allows you to upload inference images
- api: Allows you to access the API functions
- azure_speech_to_text: Allows you to access Azure speech to text API
- azure_vision_orc: Allows you to have Azure OCR proxy endpoint
- datasource_create_or_edit: Allows you to create or edit new data sources
- datasources_delete: Allows you to delete an existing data source
- datasources_export: Allows you to export an existing data source
- devices_broadcast: Allows you to contact a device
- fa_read: Allows you to read Frontline Apps
- tasks_view: Allows you to access the task page
- user_login_code: Allows you to access current user details and the login QR code with only one one-time login
- wf_task: Allows you to access the workflow task API
- adm_devices_scanners: Allows you to access the external scanners page
- adm_users_view: Allows you to view all users
- device_screenshot: Allows you to access the client screen mirroring
- app_spatial_editor: Allows you to access Spatial Editor
- app_spatial_workplace: Allows you to access Spatial Workplace
- spatial_cad_import: Allows you to import CAD models by using a commercial 3rd party library
- spatial_live_editor: Allows you to edit workflows on your mobile device
- spatial_object_tracking: Allows you to use object tracking using a commercial 3rd party library
- spatial_teamcenter_add_on: Allows you to get access to the Siemens Teamcenter Add-on
- spatial_workflow_delete: Allows you to delete Spatial Workplaces
- base_licensed_permissions: Allows you to grant the base permissions for licensed users
- home_dashboard_access: Allows you to access the home page dashboard
- home_dashboard_show_device_flow: Shows the device flow link on the dashboard
- show_task_details_comments: Allows you to have access to view comments for task
- show_task_details_steps: Allows you to view step details
- show_task_duration: Shows task duration and timestamps
- tasks_create_or_edit: Allows you to create and edit templates
- tasks_delete: Allows you to delete tasks
- tasks_export: Allows you to export tasks
- templates_create_or_edit: Allows you to create or edit templates
- templates_delete: Allows you to delete templates
- templates_export: Allows you to export templates
- templates_view: Allows you to access to the template page
- wp_gen_fetch-datasource: Allows you to fetch data source
- wp_gen_get-app-config: Allows you to get application configuration
- wp_gen_hdm-general: Allows you to access the general functionality
- wp_gen_work-offline: Allows you to work in offline mode
- wp_menu_hdm-menus: Allows you to access the Workplace menus
- wp_menu_my_my-tasks: Allows you to access the my tasks menu
- wp_menu_new-task: Allows you to access the new task menu
- wp_menu_scan-task: Allows you to access the scan task menu
- wp_menu_settings: Allows you to access the settings menu
- wp_workplace: Allows you to access the Workplace App
- xa_icall_can_remote_control: Allows you to use the remote flashlight
- xa_icall_chat_can_read: Allows you to view the chat
- xa_icall_chat_can_write: Allows you to send text messages in the chat
- xa_icall_contacts_contacts: Allows you to view the contacts
- xa_icall_inside-the-call: Allows you to join the calls
- xa_icall_live_enable-own-camera-stream: Allows you to enable your own camera stream
- xa_ocall_contact_list_contact-list: Allows you to access the contact list and initiate calls
- xa_ocall_xassist-dashboard: Allows you to access the Assist Dashboard
- xa_ocall_xassist-dashboard-statistics: Allows you to access the Assist Dashboard statistics
- adm_devices_show_only_devices: Allows you to filter the online devices
- datasources_view: Allows you to access xInspect data sources
- devices_view: Allows you to access the device list
- xm_xmake: Allows you to access Make
xPick
xPick role enables users to access xPick templates and picking orders.
- ai-worker: Allows you to upload inference images
- api: Allows you to access the API functions
- base_qrcode_view: Allows you to access all QR code
- fa_read: Allows you to read Frontline Apps
- tasks_view: Allows you to access the task page
- user_login_code: Allows you to access current user details and the login QR code with only one one-time login
- wf_task: Allows you to access the workflow task API
- adm_devices_scanners: Allows you to access the external scanners page
- adm_users_view: Allows you to view all users
- device_screenshot: Allows you to access the client screen mirroring
- base_licensed_permissions: Allows you to grant the base permissions for licensed users
- show_task_duration: Shows task duration and timestamps
- templates_create_or_edit: Allows you to create or edit templates
- templates_delete: Allows you to delete templates
- templates_export: Allows you to export templates
- templates_view: Allows you to access to the template page
- wp_gen_fetch-datasource: Allows you to fetch data source
- wp_gen_get-app-config: Allows you to get application configuration
- wp_gen_hdm-general: Allows you to access the general functionality
- wp_gen_work-offline: Allows you to work in offline mode
- wp_menu_call_support_call-support: Allows you to access the call support menu
- wp_menu_call_support_open-calls: Allows you to view the open calls menu
- wp_menu_hdm-menus: Allows you to access the Workplace menus
- wp_menu_my_my-tasks: Allows you to access the my tasks menu
- wp_menu_new-task: Allows you to access the new task menu
- wp_menu_scan-task: Allows you to access the scan task menu
- wp_menu_settings: Allows you to access the settings menu
- wp_workplace: Allows you to access the Workplace App
- xa_icall_can_remote_control: Allows you to use the remote flashlight
- xa_icall_chat_can_read: Allows you to view the chat
- xa_icall_chat_can_write: Allows you to send text messages in the chat
- xa_icall_contacts_contacts: Allows you to view the contacts
- xa_icall_inside-the-call: Allows you to join the calls
- xa_icall_live_enable-own-camera-stream: Allows you to enable your own camera stream
- xa_ocall_contact_list_contact-list: Allows you to access the contact list and initiate calls
- xa_ocall_xassist-dashboard: Allows you to access the xAssist Dashboard
- xa_ocall_xassist-dashboard-statistics: Allows you to access the xAssist Dashboard statistics
- devices_view: Allows you to access the device list
- xp_pp_picking: Allows you to access Picking Progress
- xp_xpick: Allows you to access xPick
Custom Roles & Permissions
When a user creates a new role, it is listed under custom roles. The user can then select the permissions they want to assign to that role from the dropdown menu and save it by clicking on the Plus icon.
