Permission Set Definitions

Default Permission Set Definitions

Permissions are required for Essentials modules to function. The following topics describe the entities to which each permission in a permission set grants the user access.

Important: Ensure that the APM Next permission set is activated for all the users. Only then, users can access Essentials. If you have upgraded from a previous version, the GE Vernova Customer Support team automatically activates the APM Next permission set for all the existing users. For new users, however, you must activate the permission set.

Administration


Permission	Description
Manage Users	Can add and deactivate users add and deactivate user groups create new permission sets assign users to user groups, permission sets, and assets create ingestor tokens in Setup

Alerts


Permission	Description
Alerts	Allows a user to perform the following tasks: Create Alerts Manage Alerts Manage Internal Notes View Limited Visibility Alerts View alert details for General Visibility alerts Note: To create an alert, you must have either the Alerts permission, or Manage Alerts and Limited Visibility Alerts permissions.
View Alert Detail	Allows a user to perform the following tasks: View Disposition value View Evidence View the Analysis Template Chart Navigate to Analysis View Asset faceplate View Linked Cases Note: When only View Internal Notes or Manage Internal Notes is selected, then the View Alert Detail permission is selected by default. In addition, the Manage permission always supersedes the View permission.
Manage Alerts	Allows a user to perform the following tasks: Manually create an Alert Change the Alert template Claim an Alert View all the Alert details (see View Alert Detail permissions above) Change Disposition Mark an Alert as Processed Release claim Add Evidence Create a Case from an Alert Create Case bulk action in grid Add notes in bulk edit Create reminder alerts View reminder alert criteria Note: Users with Manage Alerts cannot view, add, or delete an Internal Note.
View Internal Notes	Allows a user to perform the following tasks: View all the Alert details View Internal Notes Note: Users will not see the Internal Notes section if they do not have this permission. Users have view permissions only; they cannot perform any actions. When only View Internal Notes or Manage Internal Notes is selected, then the View Alert Detail permission is selected by default. In addition, the Manage permission always supersedes the View permission.
Manage Internal Notes	Allows a user to perform the following tasks: View all the Alert Details permissions View, add, and delete Internal Notes. Users can only delete Internal Notes that they created. Note: Admin must assign the Manage Alerts permission for a user, for that user to perform any actions on alerts. When only View Internal Notes or Manage Internal Notes is selected, then the View Alert Detail permission is selected by default. In addition, the Manage permission always supersedes the View permission.
View Limited Visibility Alerts	Allows a user to view alert details for limited visibility alerts and general visibility alerts.

Analysis


Permission	Description
Analysis View	User can: Perform ad hoc Analysis on assets to which they have access, but they cannot save the analyses that they create
Analysis Create	User can: Perform ad hoc Analysis on assets to which they have access Save analyses as Templates to support additional research

Analytics


Permission	Description
Manage Analytics	Access and/or modify analytic templates and orchestrations.
Manage Deployments and Filters	Access and/or modify deployments and asset filters.
Manage Analytic Configurations	Access and/or modify asset filter configuration.
View Deployments and Filters	Access deployments and asset filters.
View Analytic Configurations	Access asset filter configuration.
Blueprints	Access and/or modify blueprints (applicable to Smart Signal only).

APM Connect


Permission	Description
MI Data Loader Admin	The users have all the privileges applicable to the users having MI Data Loader User permissions. Additionally, the users can delete the data load configuration records and interface log records. To use a data loader specific to a module, the users need additional permissions specific to that module. For more information, refer to the appropriate Mappings documentation.
MI Data Loader User	The users can access to the Data Loaders feature, and can view, update, and create data load configuration records and interface log records. To use a data loader specific to a module, the users need additional permissions specific to that module. For more information, refer to the appropriate Requirements Mappings documentation.

Asset

Important: In Essentials, assign only the View Assets permission to users to keep the data synchronized in the Essentials databases.

Note: If user has access to all resources (such as an administrator), all asset restriction policies are ignored.


Permission	Description
Ingest Assets api	None
View Assets api	None
Edit Assets api	None
Ingest Assets	User can create and edit the asset model for the tenant. User can also view related ingestion logs. Important: In Essentials, users with Ingest Assets permission can edit asset-related data using the Essentials UI. However, the users must not edit asset data other than the groups, templates, tags, geolocation, and classifications to avoid asset data in the Essentials databases to become out of sync.
View Assets	User can view all data related to assets, including Asset Instances and Classifications.
Edit Assets	User can modify all editable asset data via the user interface. This permission includes: view asset and allows deletion of asset instance.

Asset Health


Permission	Description
MI Health Power	Users can create, update, and delete policies, policy instances, policy recommendations, and health indicator values. Users can access the eLog module. If they are assigned to a Shift, they can also create log entries.
MI Health Admin	Users can access the eLog Administrator pages to create Shifts, Templates, and assign Teams to Shifts.
MI Health User	User can: Access the Rounds Data Collection mobile features. Create recommendations and acknowledge heath indicators in Asset Health Manager. View policy data. Create policy instances in Policy Designer. Create and modify AMS Asset recommendations. Access the eLog module. If they are assigned to a Shift, they can also create log entries and manage assignments.
MI Rounds-Pro Admin	Users can access Rounds Pro Manager and perform all the related tasks.
MI Rounds-Pro User	Users can access Rounds Pro Mobile application and perform all the related tasks.

Asset Strategy


Permission	Description
MI Strategy Power	The users have all the privileges applicable to the users having MI Strategy User permission, and the administrative privileges for the Asset Health Manager feature.
MI Strategy Admin	The users have all the privileges applicable to the users having MI Strategy Power permissions. Additionally, the users have administrative privileges for the Reliability Centered Maintenance, Failure Modes and Effects Analysis, Asset Strategy Management, Asset Strategy Implementation, and Life Cycle Cost Analysis features.
MI Strategy User	The users have the view, create, update, and delete privileges for the Reliability Centered Maintenance, Failure Modes and Effect Analysis, Asset Strategy Implementation, Asset Strategy Management, and Life Cycle Cost Analysis features. Additionally, the users have the administrative privileges for Rounds feature, and view privileges for Asset Health Manager and Calibration Management features.

Audit Logs


Permission	Description
User Management Audit Log	Tenant admin can view details about changes to Administration items

BI


Permission	Description
OData Extract-Cases	Allows a user to extract Cases data.
OData Extract-Alerts	Allows a user to extract Alerts data.

Cases


Permission	Description
Cases	Allows a user to perform the following tasks: View a case Claim a case Create a case Change the status of a case Update the report Add evidence and notes Create a case from an alert Note: To create a case, you must have the Cases and View Limited Visibility Cases permissions.
View Case Detail	Allows a user to perform the following tasks: View Case Details View Actions section View Evidence section View Interpretation section View Closure section, if available View any custom sections Access only the Export to PDF option. View the Notes section, add notes or delete notes created by the user. Users cannot perform the following tasks: Claim a case Change the case status Create a case Mark any similar case as reference or remove a related case from the Similar Cases section Modify the information in the Evidence, Actions, Case Info, Interpretation, or Closure sections
Edit Case Detail	Allows a user to view or edit a case. However, the user cannot create a case from an alert or create a case in Cases. Therefore, when a user with this permission claims an alert, the user will not see the Create Case button.
View Limited Visibility Cases	Allows a user to view case details of the limited visibility cases and general visibility cases.

Cost Benefit Analysis


Permission	Description
Configure Asset Type	Allows the user to perform the following tasks during tenant onboarding: Create metadata related to tenant Modify metadata related to tenant Delete metadata related to tenant
Cost Benefit Analysis	Allows the user to perform the following tasks: Create a Cost Benefit Analysis for a case Modify the Cost Benefit Analysis for a case Access the CBA Dashboard module

Cross Tenancy


Permission	Description
Cross Tenancy	Admin user can see the cross tenancy sharing tab.

Dashboard


Permission	Description
Dashboard-Update	User can update an existing dashboard. This permission is required to create dashboards as well.
Dashboard-Create	User can create a new dashboard and save it.
Class-Dashboard	User can create a class level dashboard.
Dashboard-View	User can view existing dashboards and create a private dashboard.
Default-Dashboard-Instance	User can set an instance level default dashboard.
Default-Dashboard-Class	User can set a class level default dashboard.

eLog


Permission	Description
MI eLog Viewer	Users can access the eLog module. If they are assigned to a Shift, they can also create log entries.
MI eLog Administrator	Users can access the eLog Administrator pages to create Shifts, Templates, and assign Teams to Shifts.
MI eLog Contributor	Users can access the eLog module. If they are assigned to a Shift, they can also create log entries and manage assignments.

Failure Elimination


Permission	Description
MI FE PowerUser	The users have all the privileges applicable to the users having MI FE User permission. Additionally, the users can: Create, update, and delete Root Cause Analyses, Production Plans, Production Events, Production Losses, Production Analyses, System Reliability Analyses, Spares Analyses, Reliability Distribution Analyses, Probability Distribution Analyses, Reliability Growth Analyses, and Automation Rules. Update Production Data and link Production Events to Root Cause Analyses. Create and update GAA Events and GAA Performance records.
MI FE Administrator	The users have all the privileges applicable to the users having MI FE PowerUser permissions. Additionally, the users have administrative privileges for the Generation Availability Analysis, Root Cause Analysis, Production Loss Analysis, and Reliability Analytics features.
MI Analytics Power	The users can: View, create, update, and delete cognitions. View cognition-related logs and standard lists.
MI FE User	The users can access the GAA Company, GAA Plants, GAA Units, GAA Events, GAA Performance records, Root Cause Analyses, Production Loss Analyses, Production Analyses, System Reliability Analyses, Spares Analyses, Reliability Distribution Analyses, Probability Distribution Analyses, Reliability Growth Analyses, and Automation Rules features.
MI Analytics Administrator	The users can view, create, update, and delete cognitions, cognition-related logs, and standard lists.

Foundation

Important: If the Foundation permission set is available in a tenant, you must assign at least one permission from this set to all the users of the tenant. We recommend that the users are assigned the APM Basic User Permission set for the assets they need to access.


Permission	Description
MI Foundation Power	The users have all the privileges applicable to the users having MI Foundation User permissions. Additionally, the users can: Save data from the devices in the Essentials database. Create and manage the Site Reference records. Update, add, and delete the ACA records. View the SAP System records. Add the users to the states. Remove the users from the states.
MI APM Viewer	The users can view most of the Essentials records.
MI APMNow Admin	The users can access Tools and certain administrative features.
MI Foundation User	The users can: Send and receive data from the devices. Create and manage the recommendations. Create and update the tasks. View and create the ACA records. View the KPIs, Scorecards, and Metric Views. View the SAP System records.
Administrator (Super User)	The users can access all the administrative applications and Essentials features and functionalities.
MI Foundation Admin	The users have all the privileges applicable to the users having MI Foundation Power permissions. Additionally, the users can configure mappings for the devices and view the SAP System records. In addition, the users have administrative privileges for the Catalog, Tasks, and ACA records features.

Generation Availability Analysis


Permission	Description
MI GAA Viewer	Users have View privileges forthe Generation Availability Analysis module. Users can view Event and Performance records related to the GAA Analyses.
MI GAA Administrator	Users have administrative privileges for the Generation Availability Analysis module and can perform the following operations: Access and modify all pages in the GAAApplication Settings. View, update, insert, and delete Performance records and Reports configured for a GAA Unit.
MI GAA Analyst	Users have view, update, and insert privileges for the Generation Availability Analysis module, which supports GAA Reporting.

Generation Availability Analysis Wind


Permission	Description
MI GAA Wind Operator	Users have View privileges for the Generation Availability Analysis Wind module and related policy instances.
MI GAA Wind Super Administrator	Users have administrative privileges for the Generation Availability Analysis Wind module and can perform the following operations: Access and modify all pages in the GAAWind Application Settings. Create, view, update, insert, and delete a Performance record and generate Performance and Sub Group reports.
MI GAA Wind Administrator	Users have administrative privileges for the Generation Availability Analysis Wind module and can perform the following operations: Access and modify all pages in the GAAWind Application Settings. Create, view, update, insert, and delete a Performance record and generate Performance and Sub Group reports.
MI GAA Wind Analyst	Users have view, insert, update, and delete privileges to import and modify event data for the Generation Availability Analysis Wind module.

Knowledge Management


Permission	Description
Knowledge Management	User can search the Knowledge Management System.

KPI Management


Permission	Description
Search Knowledge Management System	Allows user to search the knowledge management system.

Life Cycle Cost Analysis


Permission	Description
MI LCC Administrator	Users have administrative privileges for Life Cycle Cost Analysis.
MI LCC User	Users have user privileges for Life Cycle Cost Analysis.
MI LCC Viewer	Users have view privileges for Life Cycle Cost Analysis.

Mechanical Integrity


Permission	Description
MI Mechanical Integrity Power	The users have all the privileges that are applicable to the MI Mechanical Integrity User. Additionally, users can access the criticality calculator family and RBI features (except data mapping). The users have view privileges for all the RBI families.
MI Mechanical Integrity Administrator	The users have all the privileges that are applicable to users with MI Mechanical Integrity Power permissions. Additionally, users have administrative privileges for the Thickness Monitoring and RBI features and can access the RBI data mapping and reference tables.
MI Mechanical Integrity User	The users can access the T-Min Calculator, Archive Corrosion Rates, Exclude TMLs, and Renew TMLs features. Additionally, users have basic access to the Inspection and Thickness Monitoring features.
SC Recommendation Management Implementer	The users can change the status of the Recommendations from the Approved or In Progress state to the Completed state.
SC Recommendation Management Reviewer	The users can change the status of the Recommendations from the Pending Approval state to one of the following states: Pending Review Approved Canceled Rejected
MI Mechanical Integrity Viewer	The users have view privileges to all the families in Risk Based Inspection, Thickness Monitoring, and Inspection Management.
MI Inspection Viewer	The users have view privileges to all the families in Inspection Management.
MI Inspection	The users have access to all the families in Inspection Management. Additionally, users can access Compliance Strategy and Compliance Policy Mapping.
MI Inspection Supervisor	The users are populated in the Reviewers Name field of the baseline inspection workflow, and can create, update, review, and approve an inspection. Note: This role does not have an added group. To access a specific module or a feature, add the relevant group to the user.
MI Inspector	The users are populated in the Inspection Report Owner field of the baseline inspection workflow, and can create, update, review, and send inspections for approval. Note: This role does not have an added group. To access a specific module or a feature, add the relevant group to the user.
MI Contract Inspector	The users have privileges to create and update an inspection as a third-party inspector. Note: This role does not have an added group. To access a specific module or a feature, add the relevant group to the user.
MI Thickness Monitoring Administrator	The users have all the privileges that are applicable to the MI Thickness Monitoring Inspector. Additionally, users have administrative privileges for Thickness Monitoring features and can access the TM Rules Lookup, data mapping, and reference tables.
MI Thickness Monitoring Inspector	The users have all the privileges that are applicable to the MI Thickness Monitoring Viewer. Additionally, users can access the Thickness Measurement Locations, Datapoints, T-Min Calculator, Archive Corrosion Rates, Exclude TMLs, and Renew TMLs features along with other basic TM features.
MI Thickness Monitoring User	The users have all the privileges that are applicable to the MI Thickness Monitoring Inspector. However, the Thickness Monitoring User is restricted from deleting some of the Thickness Monitoring records like Datapoint Measurement.
MI Thickness Monitoring Viewer	The users have view privileges to all the families in Thickness Monitoring.
MI Compliance Administrator	The users have all the privileges that are applicable to the MI Compliance Analyst. Additionally, users can create, update, or delete Compliance Strategy Templates and link/unlink assets to the Compliance Strategy Template. Note: This role does not have an added group. To access a specific module or a feature, add the relevant group to the user.
MI Compliance Analyst	The users have privileges to suggest and apply Compliance Strategy Templates, create Inspection Plans, and update Compliance Recommendations. Note: This role does not have an added group. To access a specific module or a feature, add the relevant group to the user.
MI Inspection Plan Approver	The users have privileges to update and approve an Inspection Plan. Additionally, users have view privileges for Compliance Management, Inspection Management, and Risk Based Inspection.
MI RBI Administrator	The users have all the privileges that are applicable to the MI RBI Analyst. Additionally, users have administrative privileges for RBI features and can access the RBI data mapping and reference tables, but cannot update an Inspection Plan.
MI RBI Analyst	The users have all the privileges that are applicable to the MI RBI Viewer. Additionally, users have the privileges for calculating RBI Analysis and associated functionalities related to an RBI Analysis such as Duplicate Analysis, Apply Analysis, and Create What-If Analysis. Users can also update an Inspection Plan.
MI RBI Viewer	The users have view privileges to all the families in Risk Based Inspection.

Policy Designer


Permission	Description
MI Policy Administrator	Users can modify application settings for Policy Designer and Family Policies. Users can create, update, and delete policies, policy instances, policy recommendations, and health indicator values. Users can view policy execution results.
MI Policy Designer	Users can create, update, and delete policies, policy instances, policy recommendations, and health indicator values. Users can view policy execution results.
MI Policy User	Users can create, update, and delete policy instances, policy recommendations, and health indicator values. Users can view policies and policy execution results.
MI Policy Viewer	Users can view policies, policy instances, and policy execution results.

Predix Workorder Management


Permission	Description
Predix Workorder Management Note: This permission is only for Essentials, not Legacy Predix Essentials users.	Users must be assigned this permission to perform the following activities: Create Recommendations from Alerts and Cases View list of recommendations in Alert and Case Details pages View Work Orders in Alert and Case Details pages View Criticality number in Alert and Case Details pages and Asset dashboard View open work orders, completed work orders, and recommendations data in an asset dashboard.

Production Loss Analysis


Permission	Description
Production Loss Accounting User	Users can update Production Plans, Production Data, and Production Events.
Production Loss Accounting Viewer	Users have view privileges for Production Loss Analysis and can view Production Plans, Production Data, and Production Events. However, the users cannot update the Production Plans, Production Data, or Production Events.
Production Loss Accounting Service	Users can perform the following operations: Access Production Plans. Enter Production Data. Reconcile Production Losses. Create Production Events. However, users cannot create Production Plans.
Production Loss Accounting Administrator	Users have administrative privileges for Production Loss Analysis and can perform the following operations: Access the PLA Administrator page. Create Plan Templates, Production Units, Production Profiles, and Products. Update Production Data.

Reliability Analytics


Permission	Description
MI Reliability Administrator	Users have administrative privileges for Reliability Analytics workflows.
MI Reliability Analyst	Users have user privileges for Reliability Analytics.
MI Reliability Viewer	Users have view privileges for Reliability Analytics.

Root Cause Analysis


Permission	Description
MI PROACT Administrator	Users have administrative privileges for Root Cause Analysis.
MI PROACT Team Member	Users have user privileges for Root Cause Analysis.
MI PROACT Viewer	Users have view privileges for Root Cause Analysis.

Rounds


Permission	Description
MI Operator Rounds Administrator	Users can access the Data Collection, Rounds Designer, and Rounds Mobile applications and perform all administrative tasks.
MI Operator Rounds Mobile User	Users can access the Rounds Mobile application and perform all the related tasks.

Safety


Permission	Description
MI Safety Power	The user can access the following records: Initiating Event Consequence Adjustment Probabilities IPL Checklist Active IPL Passive IPL Human IPL Asset Safety Preferences Additionally, the users have all the privileges applicable to the users having MI Safety User permissions, and have the ability to create, modify, and delete all other records in Calibration Management, Hazards Analysis, LOPA, and SIS Management.
MI Safety Admin	The users have all the privileges applicable to the users having MI Safety Power permission. Additionally, the users can create, modify, and delete all the records in Calibration Management, Hazards Analysis, LOPA, MOC, and SIS Management.
MI Safety User	The users can access the Recommendations, Calibration Templates, Risk Threshold records, Protective Instrument Loops, SIL Assessments, and SIL Threshold records features. Additionally, the users can access, create, modify, and delete all other records in Calibration Management, Hazards Analysis, LOPA, MOC, and SIS Management. In MOC, the users can access, create, modify, and delete General Recommendations.

Setup


Permission	Description
Setup	Included with Manage Users from Administration Available to User Admins to create and view ingestor URLs, username and passwords. Provides the ability to reset ingestion password.

SmartSignal

Note: By default, Essentials does not give users access to the SmartSignal microapps. An administrator must provide each user with permissions to access the SmartSignal applications, as well as modify the permissions for the ingestor user (used to upload assets into Essentials).


Permission	Description
SmartSignal Evidence	Can view SmartSignal Alerts and charting data for Analysis.
SmartSignal Host and Tenant	Setup SmartSignal Hosts and Tenants User can configure SmartSignal hosts. User can configure SmartSignal tenant mappings.
SmartSignal Mapping	Setup SmartSignal Analytic – Can perform SmartSignal asset mapping. Setup SmartSignal Maintenance
For Essentials native client configurations, users must have the following permissions:
SmartSignal Evidence	Setup SmartSignal Evidence
SmartSignal Mapping	Setup SmartSignal Analytic
For Essentials configurations, users must have the following permissions:
Analytics	Manage Analytics catalog
SmartSignal Evidence	Setup SmartSignal Evidence
SmartSignal Mapping	Setup SmartSignal Analytic

State Management


Permission	Description
SM_Analyst	The users can transition states using State Management.
SM_Approver
SM_Assessor
SM_Coordinator
SM_Facilitator
SM_Implementor
SM_Initiator
SM_Owner
SM_Planner
SM_Team Leader

Stuf


Permission	Description
Basic group info	Can set up and edit basic group information.

Templates


Permission	Description
Alert Templates	Can create Alert Templates.
Cases Templates	Can create Case Templates.

Timeseries


Permission	Description
View Data Sources for Timeseries	Can view data sources for Timeseries.
Add Timeseries	Can ingest and update Timeseries data.
View Timeseries	Can view Timeseries data.
Configure Data Sources for Timeseries	Can configure data sources for Timeseries.

Units of Measure


Permission	Description
ViewUoM	User can view the Units of Measure Conversion page.
EditUoM	User can edit the Units of Measure Conversion page.