# User Role與UI關係
---
## RTM的一些定義, Dataconnect使用相同規則
### Enabler (Data Management) (符合 1 2 其中一個)
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
- OrgAclScope.Gmp
- OrgAclScope.Profile
- OrgAclScope.MachineStatus
- OrgAclScope.MappingRule
- DhAclScope.InOutbound

- User 任意 Group 有以下 View 的權限 (符合其中一個)
- OrgAclScope.Gmp

### User Management
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
- OrgAclScope.User
- OrgAclScope.Client
- OrgAclScope.Role

### Command Center
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
- OrgAclScope.Cmdc

## Dataconnect額外的定義
### Enabler (Data Management) (符合 1 2 其中一個)
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
- biAcls.Device
### Command Center
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
- biAcls.Dashboard
---
# iFactory Role vs Dataconnect Role
---
## Note:
- 原本DeviceOn/BI只定義了下列幾種Scope
- Group, Object, and Parameter
- Device Management
- User List (我們叫User Management)
- Dashboard & Menu List
- Value and Alarm
- Operation Log
- 有疑慮的會再上述幾個scope的差異

## Admin
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | m | m |
| Alarm and Event | m | m |
| Profile Management | m | m |
| Machine Status | m | m |
| Rule Management | m | m |
| In-Outbound Settings | m | m |
| Device Management | m | m |
| Others (Organizer) | m | m |
| Others (Data Hub) | m | m |
| Others (Rule Engine) | m | m |
| User List | m | m |
| Client List | m | m |
| Role List | m | m |
| Command Center Settings | m | m |
| Dashboard & Menu List | m | m |
| License | m | m |
| Authority Management | m | m |
| Value and Alarm | m | m |
| Operation Log | m | m |
## Editor
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | m | m |
| Alarm and Event | m | m |
| Profile Management | m | m |
| Machine Status | m | m |
| Rule Management | m | m |
| In-Outbound Settings | m | m |
| Device Management | m | undefined |
| Others (Organizer) | m | m |
| Others (Data Hub) | m | m |
| Others (Rule Engine) | m | m |
| User List | N | v |
| Client List | m | v |
| Role List | m | v |
| Command Center Settings | m | m |
| Dashboard & Menu List | m | undefined |
| License | v | v |
| Authority Management | v | v |
| Value and Alarm | m | undefined |
| Operation Log | m | undefined |
## Engineer (Dataconnect only)
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | m | undefined |
| Alarm and Event | m | undefined |
| Profile Management | m | undefined |
| Machine Status | m | undefined |
| Rule Management | m | undefined |
| In-Outbound Settings | undefined | undefined |
| Device Management | m | undefined |
| Others (Organizer) | m | undefined |
| Others (Data Hub) | undefined | undefined |
| Others (Rule Engine) | m | undefined |
| User List | N | undefined |
| Client List | m | undefined |
| Role List | m | undefined |
| Command Center Settings | m | undefined |
| Dashboard & Menu List | m | undefined |
| License | v | undefined |
| Authority Management | v | undefined |
| Value and Alarm | m | undefined |
| Operation Log | m | undefined |

## Operator
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | N | N |
| Alarm and Event | N | N |
| Profile Management | N | N |
| Machine Status | N | N |
| Rule Management | N | N |
| In-Outbound Settings | N | N |
| Device Management | N | undefined |
| Others (Organizer) | N | N |
| Others (Data Hub) | N | N |
| Others (Rule Engine) | N | N |
| User List | N | N |
| Client List | N | N |
| Role List | N | N |
| Command Center Settings | N | N |
| Dashboard & Menu List | N | undefined |
| License | N | N |
| Authority Management | N | N |
| Value and Alarm | m | undefined |
| Operation Log | m | undefined |
## Viewer
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | N | v |
| Alarm and Event | v | v |
| Profile Management | v | v |
| Machine Status | v | v |
| Rule Management | v | v |
| In-Outbound Settings | v | v |
| Device Management | N | undefined |
| Others (Organizer) | v | v |
| Others (Data Hub) | v | v |
| Others (Rule Engine) | v | v |
| User List | N | v |
| Client List | v | v |
| Role List | v | v |
| Command Center Settings | v | v |
| Dashboard & Menu List | N | undefined |
| License | v | v |
| Authority Management | v | v |
| Value and Alarm | v | undefined |
| Operation Log | v | undefined |

---
# Scope / ACLs對應表
---

## Object Management

| Display Name | ACL | scope |
| -------- | -------- | -------- |
| Group, Object, and Parameter | orgAcls | GMP |
| Alarm and Event | reAcls | HighLowEvent |
| Profile Management | orgAcls | Profile |
| Machine Status | orgAcls | MachineStatus |
| Rule Management | orgAcls | MappingRule |
| In-Outbound Settings | dhAcls | InOutbound |
| Device Management | biAcls | Device |
| Others (Organizer) | orgAcls | Others |
| Others (Data Hub) | dhAcls | Others |
| Others (Rule Engine) | reAcls | Others |

- Note: dhAcls的InOutbound 跟 biAcls的Device 要討論一下是否合併
## User Management

| Display Name | ACL | scope |
| -------- | -------- | -------- |
| User List | orgAcls | User |
| Client List | orgAcls | Client |
| Role List | orgAcls | Role |

## Command Center

| Display Name | ACL | scope |
| -------- | -------- | -------- |
| Command Center Settings | orgAcls | Cmdc |
| Dashboard & Menu List | biAcls | Dashboard |

## System Setting
| Display Name | ACL | scope |
| -------- | -------- | -------- |
| License | orgAcls | License |
| Authority Management | orgAcls | Permission |

## WISE-PaaS Dashboard
| Display Name | ACL | scope |
| -------- | -------- | -------- |
| Value and Alarm | biAcls | Alarm |
| Operation Log | biAcls | Log |
---
###### tags: `WISE-DataConnect`