Role-Based Access Control (RBAC) Implementation Guide

Last updated – April 10, 2026

This page, as of NetSpeek platform version 1.1, describes the permissions of the platform-provided default roles in the table below. There are 6 roles, defined as Owner, Administrator, Manager, Operator, Analyst, and Viewer.

PermissionDescriptionOwnerAdministratorManagerOperatorAnalystViewer
Identity and Access Management
Users:ReadSelfView own profile and settings
Users:WriteSelfUpdate own profile and settings
Users:ReadSelfView other users
Users:WriteCreate / Update other users
Roles:ReadView roles
Roles:WriteManage roles
Roles:Assign<tbd>
Permissions:ReadView permissions
Tenants and Context
Customers:ReadSelfView current tenant details
Customers:WriteSelfUpdate current tenant details
Customers:ReadView child tenants
Customers:WriteManage child tenants
Context:SwitchSwitch tenant context
Location Management
Locations:ReadView location entities
Locations:WriteManage location entities
Endpoints and Devices
Devices:ReadView devices❌ (??)
Devices:WriteCreate / Edit devices
Endpoints:ReadView endpoints
Endpoints:WriteManage endpoints
Endpoints:ActionDispatch actions to devices
Integrations
Integrations:ReadView integrations❌ (??)
Integrations:WriteManage integrations
Lena and Reports
Lena:ChatChat with Lena
Reports:ReadView reports (Room Check results)
Room Checks
RoomChecks:TargetState.ReadView Room Check target states
RoomChecks:TargetState.WriteManage Room Check target states
RoomChecks:Schedule.ReadView Room Check schedules
RoomChecks:Schedule.WriteManage Room Check schedules

Notes:

As of platform version 1.1, there are no exposed differences between Owner and Administrator. Future plans for the RBAC featureset will provide separation between these roles – discuss these plans with NetSpeek Sales Engineering if of interest.