Default Roles and Permissions
By default, WSO2 IoTS includes a set of roles. These default roles and permissions have been explained in the following subsections.
Default user roles
The following roles are available by default in WSO2 IoTS:
admin - Role assigned to the super tenant administrator by default.
If you are defining the permissions for an IoTS administrator who needs to perform operations and configure policies, make sure to select admin. The admin permission allows the user to perform operations and configure policies for devices.
internal-devicemgt-user - This is a system reserved role with the minimum set of permissions to carry out operations. When a user creates an account before accessing the device management console the user is assigned the internal-device-mgt role by default.
Permissions associated with user roles
User role | Allows Actions |
---|---|
admin | The super tenant administrator belongs to this role. By default, a super tenant administrator will have full control on all the device management consoles. |
devicemgt-user | Carryout external operations on a device based on the permissions assigned via the permission tree. Example: getting device details, registering a device control the buzzer and many more. |