Permission Sets

About Permission Sets

Permission sets specify the actions users can take and the assets on which they can act.

To control user access to Essentials, as a user administrator, you assign permission sets (actions) and one or more assets to individual users or user groups.

Keep the following in mind when planning for permission sets and user access:

You can define multiple permission sets. Each permission set can have one or more features.
You can assign one or more permission sets to a single user. For example, you can do this when you first add the user to Essentials.
You can assign one permission set per user group. User groups provide a convenient and powerful way to manage access for multiple users.
You can assign a user to multiple user groups. When you add a user to a user group, the user receives its associated permission sets as defined in the user group definition.

Default Permission Sets

The default permission sets are specified in the table.

You can view the following default permission sets on the Permission Sets page.

Tip: Select the permission set to view all available permissions (actions) for the permission set.

Table 1. Permission Sets
This Permission Set:	Can do this:
APM Next	Allows you to access Essentials. Important: Ensure that the APM Next permission set is activated for all the users. Only then, users can access Essentials. If you have upgraded from a previous version, the GE Vernova Customer Support team automatically activates the APM Next permission set for all the existing users. For new users, however, you must activate the permission set.
Foundation Admin	Has administrator permissions for the Essentials application.
APM Basic User	Access Applications menu, tools, and basic applications. Note: If present, this permission set should be selected for all users in the tenant.
User Admin	Add more administrators for the tenant. Manage users (add, edit, and deactivate users and permission sets). Manage user groups (add, edit, and deactivate users and permission sets).
Ingestor Admin	Users with the Ingestor Admin role have privileges for the ingestion process.
M&D Manager	May be assigned permissions to specific MicroApps, such as Alerts, Cases, Analysis, Asset, or Analytics.
SmartSignal	Has administrator permissions for SmartSignal.
AnalyticsExecutorRole	Has permissions for the following permission sets: Alerts Manage Analytics catalog Asset – View, ingest, and edit assets Cases Templates – Case and Alert Templates Timeseries – View data sources for Timeseries, Add Timeseries, View Timeseries, and Configure data sources for Timeseries
Custom	Perform actions defined in that permission set on assigned assets.