---
# System prepended metadata

title: ThingsBoard PE Role Feature
tags: [ThingsBoard]

---

ThingsBoard Professional Edition (PE) Role Feature

## Intro

* The role feature is only in the ThingsBoard Professional Edition

* A Role contains a list of Resources and a list of allowed Operations for each of those resources. There are two Role types: **Generic** and **Group**

    * The **Generic Role** consists of the set of permissions that are applied to all entities of the Tenant or Customer or Sub-customer recursively

    * The **Group Role** defines a set of permissions for a specific group of users in relation to a specific group of entities


* Role Setting
    * After adding a role character, the role can be applied in the user group
        * Tenant setting `Users > Groups`
        ![image](https://hackmd.io/_uploads/SJ-EGzjhT.png)

        * Customer setting `Customers > All > Customer A: Users > Groups`
        ![image](https://hackmd.io/_uploads/Sy9CZGshT.png)
![role4](https://hackmd.io/_uploads/SJB8I-snp.png)
![role5](https://hackmd.io/_uploads/Sk8vUZo2T.png)


* Not only Customer, tenant can also be set up a specific authority
    * Except original tenant authority can't change, you can add a new tenant group with a new authority limit
![role6](https://hackmd.io/_uploads/S19_U-s2a.png)



<br/><br/>

## TB PE RBAC Structure
:::info
* Each Owner may have multiple Entity Groups, User Groups, and Customer Groups

* Each Entity has only one owner. However, Entities can belong to multiple Entity Groups that belong to the same owner

* Since Entity Group has only one Owner, you can assign Group Role to any User Group that belongs to the same Owner or any parents of the Owner
:::
![role7](https://hackmd.io/_uploads/SJdrxfjha.png)

![role8](https://hackmd.io/_uploads/B1HUlzohp.png)

![role9](https://hackmd.io/_uploads/HyzPezina.png)

![role10](https://hackmd.io/_uploads/HJbdxzj36.png)



Generic Roles
![role11](https://hackmd.io/_uploads/HJl4KlGinp.png)




## Reference
[Advanced Role-Based Access Control (RBAC)](https://thingsboard.io/docs/pe/user-guide/rbac/)


<br/>

TB CE RBAC Structure
![role12](https://hackmd.io/_uploads/Sklqgfina.png)
