Adding a Role and Permissions

Follow the instructions below to add a role:

1. Sign in to the WSO2 IoTS console and click the  icon.

   If you want to try out WSO2 IoT Server as an admin, use  admin  as the username and  admin  as the password.

2. Click Role Management.
   
3. Click ADD ROLE.
   
4. Provide the required details and click Add Role.
   • Domain: Provide the user store type from the list of items.

   • Role Name: Provide the role name. 

   • User List: Define the users belonging to the respective role. Type the first few characters of the user name and WSO2 IoTS will provide the list of users having the same characters. You can then select the user/s you wish to add.
   

5. 
   Define the permissions that need to be associated with the role you created by selecting the permissions from the permission tree.
   As the permissions are categorized, when the main permission category is selected, all its sub-permissions will get selected automatically. 

   For more information on the APIs associated with the permissions, see Permission APIs.

   Permissions	Description
   Applications management	You can install applications on devices registered with WSO2 IoTS via the WSO2 App Manager store or you can install applications via the internal REST APIs that is available on WSO2 IoTS. This permission ensures that a user is able to install and uninstall applications via the internal APIs that are available in WSO2 IoTS. For more information on installing applications via the WSO2 Store, see Installing and Updating Mobile Apps.
   Certificate management	WSO2 IoTS supports mutual SSL, where the client verifies that the server can be trusted and the server verifies that the client can be trusted by using digital signatures.  This permission ensures that a user is able to add, modify, view and remove the client-side mutual SSL certificates. For more information on managing certificates with the WSO2 IoTS console, see Managing Client Side Mutual SSL Certificates.
   Configurations management	The monitoring frequency is configured under the general platform configurations in WSO2 IoTS. The IoT server uses this parameter to determine how often the devices enrolled with WSO2 IoTS need to be monitored. This permission enables users to configure, update and view the general platform configurations in WSO2 IoTS. In the general platform configurations, you need to define the monitoring frequent, which is how often the IoT server communicates with the device agent. For more information, see General Platform Configurations.
   Viewing the device statistics dashboard	This permission enables you to access the device statistics dashboard and monitor devices. For more information on the permissions required to access the device statistics dashboard, see Configuring Permissions to Access the Device Statistics Dashboard.
   Manage Devices	This permission enables you to view and manage all the devices registered with WSO2 IoT.
   Disenroll devices	This permission enables you to disenroll or unregister Android and Windows devices.
   Enroll devices	This permission enables you to enroll or register Android, iOS and Windows devices with WSO2 IoTS.
   Device Operations	WSO2 IoTS offers various device operations based on the mobile platform. This permission enables users to view and carry out device operations on their devices. Expand the preferred platform and select the operations that need to be enabled for users that belong to the role you are creating.
   Platform configuration management	In WSO2 IoTS the settings can be customized for each platform. This permission enables you to maintain and customize the notification type, notification frequency, and the End User License Agreement (EULA) to suit the requirement of Android, iOS, and Windows mobile platform. For more information, see Android platform settings, iOS platform settings and Windows platform settings.
   View notifications	The failure to carry out operations will be notified to the IoTS administrator and the device owner. This permission enables you to view the notifications that were sent. For more information on how it works, see Checking Notifications.
   Manage policies	In WSO2 IoTS, you can define policies, which include a set of configurations. WSO2 IoTS policies are enforced on the IoTS users' devices when new users register with the IoTS. The IoTS policy settings will vary based on the mobile OS type. This permission enables you to add, modify, view, publish, unpublish and remove policies. For more information on working with policies, see Managing Policies.
   Manage roles	WSO2 IoTS allows you to create new customized roles. This permission enables you to add, modify, view and remove roles. For more information on working with roles, see Managing Roles.
   Manage users	WSO2 IoTS allows you to create and manage users. This permission enables you to add, modify, view and remove users. For more information on working with users, see Managing Users.
   Mobile application management	You are able to create mobile apps in the WSO2 App Manager publisher that is available in WSO2 IoTS. In order to create, publish, delete, install and update mobile applications the required permissions must be selected. To enable users to subscribe to applications and install an application on a device via the WSO2 App Manager store you need to select Subscribe that is under the Web App permissions. For more information see the sections given below: Creating Mobile Applications. Installing and Updating Mobile Apps.

6. Click Update Role Permission.