Role-Based Access Control (RBAC) Implementation Guide

Last updated – June 8, 2026

This guide, as of NetSpeek platform version 1.5, describes the permissions of the platform-provided default roles in the table at the bottom of the page. There are 6 roles, defined as Owner, Administrator, Manager, Operator, Analyst, and Limited Access*.

*The Limited Access role was originally named Viewer and is in the process of being renamed in the NetSpeek platform interface. The documentation below for Limited Access addresses either role name you may see in your tenant.

Groups Configuration (Optional)

The intention of the Groups feature in Tenant Settings is to make RBAC administration more scalable by enabling managing role assignments for multiple users in bulk.

To configure Groups, navigate to Tenant Management –> Groups:

Groups are initially given a name and description – roles and members are assigned afterward.

Member assignment of NetSpeek Users to a group

Role assignment – defining what permissions the group members will have

An example of 2 groups – members of the first group have Administrator permissions, and the second have Analyst permissons

Permissions By Role

The table below describes the permissions allotted to each role – roles can be assigned to Groups as described above, or to individual users.

Permission	Description	Owner	Administrator	Manager	Operator	Analyst	Limited Access
Identity and Access Management
Users:ReadSelf	View own profile and settings	✅	✅	✅	✅	✅	✅
Users:WriteSelf	Update own profile and settings	✅	✅	✅	✅	✅	✅
Users:Read	View other users	✅	✅	✅	✅	❌	❌
Users:Write	Create / Update other users	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Roles:Read	View roles and assigned permissions	✅	✅	✅	❌	✅	❌
Roles:Write	Update role permissions and delete roles	✅	✅	❌	❌	❌	❌
Roles:Assign	Assign or revoke users from roles	✅	✅	❌	❌	❌	❌
–	–	–	–	–	–	–	–
Permissions:Read	View permissions	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Tenants and Context
Customers:ReadSelf	View current tenant details	✅	✅	✅	✅	✅	✅
Customers:WriteSelf	Update current tenant details	✅	✅	❌	❌	❌	❌
Customers:Read	View child tenants	✅	✅	✅	❌	✅	✅
Customers:Write	Manage child tenants	✅	✅	❌	❌	❌	❌
–	–	–	–	–	–	–	–
Context:Switch	Switch tenant context	✅	✅	✅	✅	✅	✅
–	–	–	–	–	–	–	–
Location Management
Locations:Read	View location entities	✅	✅	✅	✅	✅	✅
Locations:Write	Manage location entities	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Endpoints
Endpoints:Read	View endpoints	✅	✅	✅	✅	✅	✅
Endpoints:Write	Manage endpoints	✅	✅	✅	✅	❌	❌
Endpoints:Action	Dispatch actions to devices	✅	✅	✅	✅	❌	❌
–	–	–	–	–	–	–	–
Integrations
Integrations:Read	View integrations	✅	✅	✅	✅	✅	❌
Integrations:Write	Manage integrations	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Lena and Reports
Lena:Chat	Chat with Lena	✅	✅	✅	✅	✅	✅
Reports:Read	View reports (Room Check results)	✅	✅	✅	✅	✅	❌
–	–	–	–	–	–	–	–
Room Checks
RoomChecks:TargetState:Read	View Room Check target states	✅	✅	✅	✅	✅	✅
RoomChecks:TargetState:Write	Manage Room Check target states	✅	✅	✅	✅	❌	❌
RoomChecks:Schedule:Read	View Room Check schedules	✅	✅	✅	✅	✅	✅
RoomChecks:Schedule:Write	Manage Room Check schedules	✅	✅	✅	✅	❌	❌

Notes:

As of platform version 1.5, there are no exposed differences between Owner and Administrator. Future plans for the RBAC featureset will provide separation between these roles – discuss these plans with your NetSpeek representative if of interest.