---
# System prepended metadata

title: User Role與UI關係
tags: [WISE-DataConnect]

---

# User Role與UI關係
---
## RTM的一些定義, Dataconnect使用相同規則
### Enabler (Data Management) (符合 1 2 其中一個)
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
	- OrgAclScope.Gmp
	- OrgAclScope.Profile
	- OrgAclScope.MachineStatus
	- OrgAclScope.MappingRule
	- DhAclScope.InOutbound

- User 任意 Group 有以下 View 的權限 (符合其中一個)
	- OrgAclScope.Gmp

### User Management
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
	- OrgAclScope.User
	- OrgAclScope.Client
	- OrgAclScope.Role

### Command Center
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
	- OrgAclScope.Cmdc

## Dataconnect額外的定義
### Enabler (Data Management) (符合 1 2 其中一個)
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
	- biAcls.Device
### Command Center
- User 在 Tenant 有以下 View 的權限 (符合其中一個)
	- biAcls.Dashboard
---
# iFactory Role vs Dataconnect Role
---
## Note:
- 原本DeviceOn/BI只定義了下列幾種Scope
	- Group, Object, and Parameter
	- Device Management
	- User List (我們叫User Management)
	- Dashboard & Menu List
	- Value and Alarm
	- Operation Log
- 有疑慮的會再上述幾個scope的差異

## Admin
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | m     | m     |
| Alarm and Event    | m     | m    |
| Profile Management   | m     | m     |
| Machine Status   | m     | m     |
| Rule Management   | m | m     |
| In-Outbound Settings   | m     | m    |
| Device Management   | m     | m    |
| Others (Organizer)   | m     | m     |
| Others (Data Hub)   | m     | m     |
| Others (Rule Engine)   | m     | m     |
| User List    | m     | m     |
| Client List    | m     | m     |
| Role List   | m     | m    |
| Command Center Settings    | m     | m     |
| Dashboard & Menu List    | m     | m    |
| License    | m     | m     |
| Authority Management    | m    | m  |
| Value and Alarm    | m    | m  |
| Operation Log    | m    | m   |
## Editor
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | m   | m    |
| Alarm and Event    | m  | m  |
| Profile Management   | m    | m     |
| Machine Status   | m     | m    |
| Rule Management   | m     | m   |
| In-Outbound Settings   | m     | m   |
| Device Management   | m     | undefined  |
| Others (Organizer)   | m     | m     |
| Others (Data Hub)   | m     | m   |
| Others (Rule Engine)   | m     | m   |
| User List    | N     | v     |
| Client List    | m     | v     |
| Role List   | m     | v     |
| Command Center Settings    | m     | m   |
| Dashboard & Menu List    | m     | undefined  |
| License    | v     | v     |
| Authority Management    | v     | v     |
| Value and Alarm    | m     | undefined |
| Operation Log    | m     | undefined     |
## Engineer (Dataconnect only)
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | m   | undefined    |
| Alarm and Event    | m  | undefined  |
| Profile Management   | m    | undefined     |
| Machine Status   | m     | undefined    |
| Rule Management   | m     | undefined   |
| In-Outbound Settings   | undefined     | undefined   |
| Device Management   | m     | undefined  |
| Others (Organizer)   | m     | undefined     |
| Others (Data Hub)   | undefined    | undefined   |
| Others (Rule Engine)   | m     | undefined   |
| User List    | N     | undefined     |
| Client List    | m     | undefined     |
| Role List   | m     | undefined     |
| Command Center Settings    | m     | undefined   |
| Dashboard & Menu List    | m     | undefined  |
| License    | v     | undefined     |
| Authority Management    | v     | undefined     |
| Value and Alarm    | m     | undefined |
| Operation Log    | m     | undefined     |

## Operator
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | N   | N    |
| Alarm and Event    | N  | N  |
| Profile Management   | N   | N     |
| Machine Status   | N     | N    |
| Rule Management   | N    | N   |
| In-Outbound Settings   | N     | N   |
| Device Management   | N    | undefined  |
| Others (Organizer)   | N   | N     |
| Others (Data Hub)   | N    | N   |
| Others (Rule Engine)   | N    | N   |
| User List    | N     | N     |
| Client List    | N     | N     |
| Role List   | N    | N     |
| Command Center Settings    | N    | N   |
| Dashboard & Menu List    | N   | undefined  |
| License    | N    | N     |
| Authority Management    | N   | N     |
| Value and Alarm    | m     | undefined |
| Operation Log    | m     | undefined     |
## Viewer
m: Manage, v: View, N: None
| Display Name | Dataconnect | iFactory |
| -------- | -------- | -------- |
| Group, Object, and Parameter | N  | v    |
| Alarm and Event    | v  | v  |
| Profile Management   | v   | v     |
| Machine Status   | v    | v    |
| Rule Management   | v   | v   |
| In-Outbound Settings   | v     | v   |
| Device Management   | N    | undefined  |
| Others (Organizer)   | v    | v     |
| Others (Data Hub)   | v    | v   |
| Others (Rule Engine)   | v    | v   |
| User List    | N     | v     |
| Client List    | v    | v     |
| Role List   | v    | v     |
| Command Center Settings    | v    | v   |
| Dashboard & Menu List    | N     | undefined  |
| License    | v     | v     |
| Authority Management    | v     | v     |
| Value and Alarm    | v     | undefined |
| Operation Log    | v    | undefined     |

---
# Scope / ACLs對應表
---

## Object Management

| Display Name | ACL | scope |
| -------- | -------- | -------- |
| Group, Object, and Parameter | orgAcls     | GMP     |
| Alarm and Event    | reAcls     | HighLowEvent    |
| Profile Management   | orgAcls     | Profile     |
| Machine Status   | orgAcls     | MachineStatus     |
| Rule Management   | orgAcls     | MappingRule     |
| In-Outbound Settings   | dhAcls     | InOutbound    |
| Device Management   | biAcls     | Device    |
| Others (Organizer)   | orgAcls     | Others     |
| Others (Data Hub)   | dhAcls     | Others     |
| Others (Rule Engine)   | reAcls     | Others     |

- Note: dhAcls的InOutbound 跟 biAcls的Device 要討論一下是否合併
## User Management


| Display Name | ACL | scope |
| -------- | -------- | -------- |
| User List    | orgAcls     | User     |
| Client List    | orgAcls     | Client     |
| Role List   | orgAcls     | Role     |

## Command Center

| Display Name | ACL | scope |
| -------- | -------- | -------- |
| Command Center Settings    | orgAcls     | Cmdc     |
| Dashboard & Menu List    | biAcls     | Dashboard     |

## System Setting
| Display Name | ACL | scope |
| -------- | -------- | -------- |
| License    | orgAcls     | License     |
| Authority Management    | orgAcls     | Permission     |

## WISE-PaaS Dashboard
| Display Name | ACL | scope | 
| -------- | -------- | -------- |
| Value and Alarm    | biAcls     | Alarm  |
| Operation Log    | biAcls     | Log     |
---
###### tags: `WISE-DataConnect`