Permissions
What each node permission allows, and the default roles.
Always allowed
Every user can view devices, configs, changes, topology and vulnerabilities inside their groups, and export vulnerability lists.
Permissions
| Permission | Allows |
|---|---|
| Audit all users | See and export every user's actions in the audit log |
| SSH terminal | Open an SSH terminal to devices in their groups; download the session log |
| Checks and backups | Check status now, back up now, start a vulnerability check, copy configs to remote storage now |
| Edit devices | Add, edit, import and delete devices; add devices to groups; discover subnets |
| Push config | Push to one or many devices; restore versions; upload firmware; delete old images; run upgrades |
| Manage settings | Manage groups and compliance rules; credentials (SSH, SNMP, API tokens, cloud, backup destinations); settings and reports |
Default roles
| Role | Permissions | Typical use |
|---|---|---|
| Audit / read-only | Audit all users | Auditors and managers who look but do not touch |
| Troubleshooter | SSH terminal, Checks and backups | Service desk |
| Installer | SSH terminal, Checks and backups, Edit devices, Push config | Field and network engineers |
| Admin | All six | The network team leads |
Superadmins manage users and roles. Roles can be renamed, changed or deleted.
What's next
Last modified October 15, 2026