Role-Based Access Control (RBAC) Implementation Guide

Last updated: October 21, 2026

This guide, as of NetSpeek platform version 1.15, describes the permissions of the platform-provided default roles in the table at the bottom of the page. There are 6 roles, defined as Owner, Administrator, Manager, Operator, Analyst, and Limited Access.

Groups Configuration (Optional)

The intention of the Groups feature in Tenant Settings is to make RBAC administration more scalable by enabling role assignment for multiple users in bulk.

To configure Groups, navigate to Tenant Management –> Groups:

Groups are initially given a name and description – roles and members are assigned afterward.

---

---

---

---

Permissions By Role

The table below describes the permissions allotted to each role – roles can be assigned to Groups as described above, or to individual users.

Permission	Description	Owner	Administrator	Manager	Operator	Analyst	Limited Access
Identity and Access Management
Users:ReadSelf	View own profile and settings	✅	✅	✅	✅	✅	✅
Users:WriteSelf	Update own profile and settings	✅	✅	✅	✅	✅	✅
Users:Read	View other users	✅	✅	✅	✅	❌	❌
Users:Write	Create / Update other users	✅	✅	✅	❌	❌	❌
Users:Delete	Delete other users	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Roles:Read	View roles and assigned permissions	✅	✅	✅	❌	✅	❌
Roles:Write	Update role permissions and delete roles	✅	✅	❌	❌	❌	❌
Roles:Assign	Assign or revoke users from roles	✅	✅	❌	❌	❌	❌
Sso:Manage	Configure SSO settings. Designate or remove recovery accounts.	✅	❌	❌	❌	❌	❌
Sso:Recover	Disable SSO integration, and restore local login	✅	❌	❌	❌	❌	❌
–	–	–	–	–	–	–	–
Permissions:Read	View permissions	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Tenants and Context
Customers:ReadSelf	View current tenant details	✅	✅	✅	✅	✅	✅
Customers:WriteSelf	Update current tenant details	✅	✅	❌	❌	❌	❌
Customers:Read	View child tenants	✅	✅	✅	✅	✅	✅
Customers:Write	Manage child tenants	✅	✅	❌	❌	❌	❌
Customers:Delete	Tenant deletion	✅	✅	❌	❌	❌	❌
–	–	–	–	–	–	–	–
Context:Switch	Switch tenant context	✅	✅	✅	✅	✅	✅
–	–	–	–	–	–	–	–
Location Management
Locations:Read	View location entities	✅	✅	✅	✅	✅	✅
Locations:Write	Manage location entities	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Endpoints and Devices
CustomerDevices:Write	Create/edit/delete tenant-scoped manufacturers and devices (Device Catalog)	✅	✅	✅	❌	❌	❌
Endpoints:Read	View endpoints	✅	✅	✅	✅	✅	✅
Endpoints:Write	Manage endpoints	✅	✅	✅	❌	❌	❌
Endpoints:Action	Dispatch actions to devices	✅	✅	✅	✅	❌	❌
–	–	–	–	–	–	–	–
Integrations
Integrations:Read	View integrations	✅	✅	✅	✅	✅	❌
Integrations:Write	Manage integrations	✅	✅	✅	❌	❌	❌
–	–	–	–	–	–	–	–
Lena and Reports
Lena:Chat	Chat with Lena	✅	✅	✅	✅	✅	✅
Reports:Read	View reports (Room Check results)	✅	✅	✅	✅	✅	❌
–	–	–	–	–	–	–	–
Room Checks
RoomChecks:TargetState:Read	View Room Check target states	✅	✅	✅	✅	✅	✅
RoomChecks:TargetState:Write	Manage Room Check target states	✅	✅	✅	✅	❌	❌
RoomChecks:Schedule:Read	View Room Check schedules	✅	✅	✅	✅	✅	✅
RoomChecks:Schedule:Write	Manage Room Check schedules	✅	✅	✅	✅	❌	❌
–	–	–	–	–	–	–	–
Files
Files:Delete	Delete files from tenant (Device Catalog)	✅	✅	✅	❌	❌	❌
Files:Read	Download files and images	✅	✅	✅	✅	✅	✅
Files:Upload	Upload files to tenant (Device Catalog)	✅	✅	✅	❌	❌	❌