assets/img/logo.svg
Admin

Roles and Zones

Define what a user can do and which plants they can operate on

The Roles and Zones page controls access and permissions:

  • a Role defines what a user can do (features and permissions)
  • a Zone defines which plants the user can work on

Each user has:

  • 1 Role
  • 1 or more Zones
In short: Role = actions, Zone = scope (plants).

Page overview

The screen is split into two columns:

  • Roles (left): list of configured roles and their assigned features
  • Zones (right): list of zones and their associated plants

At the top of both columns you will find:

  • an Add button
  • filters and search (depending on the list)

Roles

A Role is a set of features that can be enabled/disabled for a user.

What you see in the Roles list

Each role is displayed as a card with:

  • Role name and description
  • Delete button (if allowed)
  • an expandable area showing Assigned features (count and list)

Features typically include (examples):

  • Commands
  • Levels And Zones
  • Trends
  • Events
The exact list depends on your version and enabled modules.

Filters and search (Roles)

You can use:

  • Feature filter: show only roles that include a specific feature
  • Role search: “Filter roles…” field

Create a new role

Click Add in the Roles column.

A Create new role dialog opens with:

  • Name (required)
  • Description (required)
  • Start page: the page shown after login (e.g. Home, Trend, Events)
  • Assigned features: selectable feature list
The Start page dropdown shows all available pages based on the navigation structure. Choose a page that makes sense for the role's primary function.

Feature selection

Inside Assigned features you will find:

  • a checkbox to enable/disable the feature
  • a small description
  • permission controls:
    • Read: user can access/view the feature
    • Write: user can perform actions/changes (only where supported)
  • for some features a gear icon is available for advanced options

If a feature does not show advanced options, it simply means that no extra configuration is available for that feature.

Click Create to save.


Edit a role

Click on a role card to open the window Edit Role.

You can update:

  • name and description
  • home page
  • enabled features
  • Read/Write permissions
  • advanced options (when available)

Advanced options: Command Level

For the Commands feature, an option may be available:

  • Command Level with - and + controls

This value determines which remote commands the user is allowed to execute.

Rule: the user can execute only commands with a level less than or equal to the role level.

Example:

  • Role with Command Level = 50 → can execute commands with level 1…50
  • commands with level > 50 will not be executable
Command Level does not replace Read/Write permissions: it is an additional protection specifically for commands.

Delete a role

Use Delete on the role card.

If a role is already assigned to one or more users, the system may prevent deletion to avoid configuration issues. In that case, reassign users to another role first.

Zones

A Zone is a set of plants.
Zones define where a user can operate and which plants they can see.

What you see in the Zones list

Each zone is displayed as a card with:

  • Name and description
  • Delete button (if allowed)
  • an expandable area showing Associated plants (count and list)
It is common to have an “All” zone that includes all configured plants. The “All” zone is useful for admin users or users who must operate on the full scope. For operational users, smaller zones are usually safer and easier to manage.

Filters and search (Zones)

You can use:

  • filters available in the UI (e.g. Filter by country, Filter by plant)
  • “Filter zone…” search field

Create a new zone

Click Add in the Zones column.

A Create new zone dialog opens with:

  • Name (required)
  • Description (required)
  • Associated plants: selectable plant list

Plant selection

In Associated plants you can:

  • filter by country
  • filter by type (e.g. Solar / Wind)
  • filter by plant
  • select individual plants using checkboxes

You also have quick actions:

  • All
  • Deselect
  • Solar
  • Wind

Click Create to save.


Edit a zone

Click on a zone card to open the window Edit Zone.

You can:

  • change name and description
  • add/remove associated plants
  • use filters and quick actions to speed up selection

Click Save to apply changes.


Best practices

  • Separate “what” from “where”: avoid creating “per-plant roles”. Use zones instead.
  • Few roles, many zones: it’s often easier to maintain 5 roles and 30 zones than the opposite.
  • Grant Write only when needed.
  • Restrict Commands:
    • enable Commands only for users who must operate remotely
    • set a Command Level aligned with responsibility
  • Smaller zones for operators: reduces mistakes and simplifies audits.

Frequently asked questions (FAQ)

Can a user have multiple zones?

Yes. A user can have one or more zones.

Can a user have multiple roles?

No. Each user has one role.

What if a plant is not included in any of the user’s zones?

The user won’t see it and cannot operate on it.

Do Read and Write apply to all features?

No. Write is available only for features that support actions or configuration. Where it’s not supported, the feature remains Read-only.

What is “Command Level”?

A numeric limit that controls which remote commands a user can execute.
The user can execute only commands with level the role’s configured level.

Can advanced options be added for other features in the future?

Yes. Some features can expose advanced options (like Command Level for Commands). If new options are added, they will appear in the same "Functionality options" area.

What is the Start page?

The Start page is the first page the user sees after logging in. It should be set to a page that is relevant to the role's primary function. For example, an operator might have Trend as their start page, while an administrator might have Users.

Does the Start page need to be a feature assigned to the role?

The system allows any page to be selected as the Start page, but for the best user experience, ensure the selected page is accessible based on the role's assigned features.