specs/models/M_USER_ROLE
User Role
A user role determines what data in the system a user has access to and what changes they are permitted to make. There are two types of user roles in Tulip: 1. Default User Roles- the pre-defined roles that are included with every Tulip instance 2. Custom User Roles- Roles that you can edit with a custom combination of individual permissions.
Each role's permissions can be viewed on the User Roles page in the Tulip platform. The permissions of each role can be viewed in the UI, and can be exported to a CSV.
Role Definitions
Tulip uses the following terminology to describe roles.
Full Access: Able to create, view, edit and archive the listed asset
Limited Access: Able to use the asset in the specific ways determined by checked boxes in the UI
View Only: Able to:
- View the asset
- Export the asset as either CSV or JSON unless specified under a separate permission.
Cannot View: Unable to view the asset
All other possible permissions are explained on the User Roles page
Tests
| ID | Name |
|---|---|
| QA-T17 | User Management : 09 - Login to /player using new badge ID |
| QA-T173 | SAML : 05 - Operators should not be allowed to login to Factory on SAML |
| QA-T260 | User Roles : 01 - Account Owners can add other Account Owners |
| QA-T261 | User Roles : 03 - Account Owners can edit other users' profiles |
| QA-T262 | User Roles : 02.1 - Account Owners can create new Account Owners |
| QA-T263 | User Roles : 04 - Account Owners should be able to deactivate/reactivate users |
| QA-T264 | User Roles : 05 / Administrators should not be able to manage users |
| QA-T265 | User Roles : 06 / Tulip Table Supervisors should not be able to manage connectors |
| QA-T266 | User Roles : 07 / Tulip Table Supervisors should not be able to manage the shop floor |
| QA-T267 | User Roles : 08.1 / Viewers should be unable to run Apps or edit/modify Apps, Dashboards, and Analytics |
| QA-T308 | Configuration and Apps : 07 - User permissions get checked when viewing video |
| QA-T332 | LDAP Tulip Managed : 02 - Users can log in via LDAP |
| QA-T636 | Workspaces : 01 - Login with different roles |
| QA-T655 | LDAP Tulip Managed : 02 / Operators can't log into Factory via LDAP |
| QA-T708 | User Roles : 05 - Administrator role |
| QA-T749 | Workspaces : 10 / - Failing to create a new user with email registered in another workspace |
| QA-T750 | Workspaces : 11 / - Failing to run an app from another workspace |
| QA-T751 | Workspaces : 12 / - Workspace owner cannot access other workspaces |
| QA-T880 | User Roles : 02.2 - Account Owners can create users other than Account Owners |
| QA-T1141 | User roles : 09.1 - Operator role |
| QA-T1145 | User roles : 09.2 - Inviting Operator users |
| QA-T1146 | User roles : 09.3 / Operators can't log in to Factory or register a Player |
| QA-T1153 | User Roles : 17.1 - Viewer (with Player Access) role - Settings |
| QA-T1159 | User Roles : 17.2 - Viewer (with Player Access) role - Player, Dashboards, Apps, Analytics |
| QA-T1160 | User Roles : 17.4 - Viewer (with Player Access) role - Machines, Machine Types, Data Sources, Vision |
| QA-T1161 | User Roles : 17.3 - Viewer (with Player Access) role - Tables, Connectors, Stations, Display Devices |
| QA-T1162 | User Roles : 11.1 - Connector Supervisor role - Settings |
| QA-T1163 | User Roles : 11.2 - Connector Supervisor role - Player, Dashboards, Apps, Analytics |
| QA-T1164 | User Roles : 11.3 - Connector Supervisor role - Tables, Connectors, Stations, Display Devices |
| QA-T1165 | User Roles : 11.4 - Connector Supervisor role - Machines, Machine Types, Data Sources, Vision |
| QA-T1166 | User Roles : 12.1 - Tulip Table Supervisor role - Settings |
| QA-T1167 | User Roles : 12.2 - Tulip Table Supervisor role - Player, Dashboards, Apps, Analytics |
| QA-T1168 | User Roles : 12.3 - Tulip Table Supervisor role - Tables, Connectors, Stations, Display Devices |
| QA-T1172 | User Roles : 12.4 - Tulip Table Supervisor role - Machines, Machine Types, Data Sources, Vision |
| QA-T1182 | User Roles : 13.1 - Station Operator role - Settings |
| QA-T1183 | User Roles : 13.2 - Station Operator role - Player, Dashboards, Apps, Analytics |
| QA-T1184 | User Roles : 13.3 - Station Operator role - Tables, Connectors, Stations, Display Devices |
| QA-T1185 | User Roles : 13.4 - Station Operator role - Machines, Machine Types, Data Sources, Vision |
| QA-T1197 | User Roles : 14.1 - Station Supervisor role - Settings |
| QA-T1198 | User Roles : 14.2 - Station Supervisor role - Player, Dashboards, Apps, Analytics |
| QA-T1199 | User Roles : 14.3 - Station Supervisor role - Tables, Connectors, Stations, Display Devices |
| QA-T1200 | User Roles : 14.4 - Station Supervisor role - Machines, Machine Types, Data Sources, Vision |
| QA-T1201 | User Roles : 15.1 - Administrator role - Settings |
| QA-T1202 | User Roles : 15.2 - Administrator role - Player, Dashboards, Apps, Analytics |
| QA-T1203 | User Roles : 15.3 - Administrator role - Tables, Connectors, Stations, Display Devices |
| QA-T1204 | User Roles : 15.4 - Administrator role - Machines, Machine Types, Data Sources, Vision |
| QA-T1205 | User Roles : 16.1 - Application Approver role - Settings |
| QA-T1206 | User Roles : 16.2 - Application Approver role - Player, Dashboards, Apps, Analytics |
| QA-T1207 | User Roles : 16.3 - Application Approver role - Tables, Connectors, Stations, Display Devices |
| QA-T1208 | User Roles : 16.4 - Application Approver role - Machines, Machine Types, Data Sources, Vision |
| QA-T1212 | User Management: 21 - Account owner can register player |
| QA-T1216 | User Roles : 10.1 - Application Builder role - Settings |
| QA-T1217 | User Roles : 10.2 - Application Builder role - Player, Dashboards, Apps, Analytics |
| QA-T1219 | User Roles : 10.3 - Application Builder role - Tables, Connectors, Stations, Display Devices |
| QA-T1220 | User Roles : 10.4 - Application Builder role - Machines, Machine Types, Data Sources, Vision |
| QA-T1222 | User Roles : 08.2 / Viewers should be unable to create, edit, or modify Tables |
| QA-T1223 | User Roles : 08.3 / Viewers should be unable to create, edit, or modify Connectors and Connector Functions |
| QA-T1224 | User Roles : 08.4 / Viewers should be unable to create, edit, or modify Stations |
| QA-T1225 | User Roles : 08.5 / Viewers should be unable to create, edit, or modify Display Devices |
| QA-T1226 | User Roles : 08.6 / Viewers should be unable to create, edit, or modify Machines |
| QA-T1227 | User Roles : 08.7 / Viewers should be unable to create, edit, or modify Machine Types |
| QA-T1228 | User Roles : 08.8 / Viewers should be unable to create, edit, or modify Machine Data Sources |
| QA-T1229 | User Roles : 08.10 / Viewers should not be able to access Vision |
| QA-T1230 | User Roles : 08.9 / Viewers should be unable to update Edge Devices |
| QA-T1231 | User Roles : 08.11 / Viewers cannot register Players |
| QA-T1232 | User Roles : 18.1 - Application Engineer role - Settings |
| QA-T1234 | User Roles : 18.3 - Application Engineer role - Tables, Connectors, Stations, Display Devices |
| QA-T1235 | User Roles : 18.4 - Application Engineer role - Machines, Machine Types, Data Sources, Vision |
| QA-T1236 | User Roles : 19.2 - Workspace Owner role - Player, Dashboards, Apps, Analytics |
| QA-T1237 | User Roles : 19.3 - Workspace Owner role - Tables, Connectors, Stations, Display Devices |
| QA-T1238 | User Roles : 19.4 - Workspace Owner role - Machines, Machine Types, Data Sources, Vision |
| QA-T1241 | User Roles : 19.1 - Workspace Owner role - Settings |
| QA-T1277 | Duplicate roles |
| QA-T1279 | Can assign custom roles |
| QA-T1285 | Can archive roles |
| QA-T1288 | Can bulk-assign roles |
| QA-T1289 | User Roles : 24 - Roles page is available even with the customUserRoles FF off |
| QA-T1355 | User Management: 21.1 - Account owner can assign player to an existing station |
Requirements
No requirements