Roles and Permissions

Admins use the members page in settings to manage members, assign roles and by that define permissions.

Roles & Permissions

Manage Roles

With admin permissions, you can change the role of each member from your organization.

  1. In the row of the member, click on the three dot menu in the last column of the table

  2. Select Edit role

  3. You can then select one of the three roles Admin, Normal, Operator


ENLYZE provides three user roles, each with different levels of access and responsibilities.

Admin

The Admin role is intended for users who need full management and troubleshooting capabilities. Admins can:

  • Manage members and invite new users.

  • Troubleshoot the IIoT infrastructure.

  • Support integration activities.

This role is best suited for managers, IT, and OT personnel who are responsible for system setup, maintenance, and overall administration.

Normal

The Normal role is designed for users who configure and manage the ENLYZE App’s operational features. Normal users can:

  • Configure the ENLYZE App.

  • Define metric calculations (e.g., OEE).

  • Create and adjust the downtime reason catalog.

Keep in mind that Normal users cannot invite new members. This role is ideal for process engineers, quality managers, and shift leaders.

Operator

The Operator role is intended for shopfloor workers who monitor production processes. Operators have limited access β€” they can view and use features that help them track and monitor production but cannot configure any settings in the ENLYZE App.

Assign this role to your shopfloor personnel who are involved in day-to-day operations.

Roles and Permission Matrix

The table below shows which features and actions are available for each role:

Feature / Action

Admin

Normal

Operator

Home screen

βœ…

βœ…

βœ…

Timeline

βœ…

βœ…

βœ…

Production runs

βœ…

βœ…

βœ…

Products

βœ…

βœ…

βœ… (read-only)

Downtimes

βœ…

βœ…

βœ…

Co-Pilot (using set-up sheets)

βœ…

βœ…

βœ…

Configuring set-up sheets

βœ…

βœ…

❌

Reports

βœ…

βœ…

❌

Process analytics

βœ…

βœ…

❌

Electronic Batch Record

βœ…

βœ…

❌

Settings ENLYZE APP

βœ…

βœ…

❌

User Management

βœ…

❌

❌

Platform (Manage Sites/Machines/Data Sources)

βœ…

❌

❌


Roles & Permissions in Grafana

When using the Grafana version hosted by ENLYZE, your ENLYZE roles are automatically mapped to the following Grafana roles:

Grafana Role Descriptions

  • Organization administrator: Has access to all organization resources, including dashboards, users, and teams.

  • Editor: Can view and edit dashboards, folders, and playlists.

  • Viewer: Can view dashboards, playlists, and query data sources.

You can find a more detailed description of the roles in the Grafana documentation.

Default Role Mapping

ENLYZE role
Applied role in Grafana

Admin

Admin

Normal

Editor

Operator

Viewer

Custom Permissions

While roles cannot be modified directly in Grafana, permissions can be customized at the folder, playlist, or dashboard level. This gives you full flexibility to deviate from the default role mapping schema outlined above.

This allows you to:

  • Grant specific users access to individual dashboards

  • Restrict access to sensitive data

  • Create custom permission structures that match your organization's needs

Change Permissions for specific Dashboards and Folders

If you want to customize access and permissions, follow these instructions:

For dashboards
  1. Open the desired dashboard

  2. Open the dashboard settings

  3. Go to Permissions

For folders
  1. Open the desired folder

  2. Click on Folder actions

  3. Select Manage permissions

The permissions management interface is the same for a folder and a dashboard. The first part of the permissions management defines what each role can do. Each dashboard and folder has the same default permissions:

You can modify the permissions for Editor and Viewer to the standard View, Edit, and Admin permissions. You can alos delete a role this will then fully revoke access.

Please note Admins will always have admin permissions for every dashboard and folder and their access cannot be deleted.

You can add new permissions by clicking on Add a permission. This option allows you to define permissions for specific users, teams, and roles.

Create Teams to Manage Permissions

Grafana offers the option of creating teams of users. Teams are a best practice to manage permissions within Grafana at the folder and dashboard level.

To create a team in the side menu, go to Administration > Users and Access > Teams.

In the Grafana documentation, you can find a more detailed description of how teams work. This post offers additional information with best practices about how to organize permissions using teams.

FAQ

Can I customize roles or create new ones?

No. Currently, ENLYZE does not support creating custom roles or modifying the default permissions of existing roles. The three predefined roles β€” Admin, Normal, and Operator β€” are designed to cover all standard use cases.

Can I change a user’s role after inviting them?

Yes. You can change a user’s role at any time from the members section (Platform > Settings > Members) by selecting the three-dot menu in the user’s row and updating their assigned role.

What happens if all Admins are removed?

If there are no remaining Admins, you’ll lose the ability to invite or manage new members. Please ensure at least one Admin is always assigned in your organization. If all admins are removed please reach out to [email protected]

What is the root cause if I can't I invite new users?

If you can't invite a new user, most likely your role is not that of an Admin and by that you don't have the permission to invite new users.

Are role changes applied immediately?

Yes. Any changes to a user’s role or permissions take effect immediately after saving.

Where can I consult the list of users and their roles in Grafana?

In Grafana, open the side menu () and go to Administration > Users and access > Users.

Can I modify the roles in the ENLYZE hosted Grafana?

No. Roles in Grafana are synchronized with the roles in ENLYZE.

There are users missing in Grafana that have a profile ENLYZE, why?

A profile is created in Grafana when the user accesses Grafana through the ENLYZE App for the first time. If the user never entered Grafana before, it won't appear as part of the Grafana list of users.

Last updated