EOS Roles and Permissions

Concepts

Permissions on Datasets and Roles on Extensions :

Permissions set the rights an Orbit User has on Datasets : “Hidden”, “Viewable” or “Editable”
Roles set the level of use a User has for a given Extension : “User”, “Operator” or “Administrator”

Permissions and Roles do have a default status which one can be overruled by multiple Private Levels. A higher ranked level will overrule a lower level :

Order of priority (from lowest to highest level) : “Global”, “Workspace”, “User Group”, “User”
Default Permission is set on “Global” level, the default Role is set on “Workspace” level.

Level of definition

Level	Permissions	Roles
Global	The status for the Global level is the default permission for datasets.	The Global level is not available for roles.
Workspace	Private dataset permissions for an Orbit Workspace, are optional but will overrule the Global status.	The status for the Workspace level is the default Role for Extensions. If an Extension is added to an Orbit Workspace, it will have at least a status for the Workspace level.
User Group	Private permissions and roles for a User Group are optional but if set they will overrule the Global and Workspace status.
User	Private permissions and roles for a User are optional but if set they will overrule the Global, Workspace and User Group status.

Dataset Permissions

Default & Private Permissions can be set via : Resources > Datasets > Dataset Use.
Private Permissions can be set via : Users and User Groups.

Permissions

Hidden : No access to the defined dataset, not for viewing not for editing.
Viewable : View access only to the defined dataset.
Editable : View and Edit access to the defined dataset. Spatial and Attribute component can be edited.
Inherited : The dataset permission is inherited from / is the same of the first set lower ranked level (User > User Group > Workspace > Global).

Roles on Extensions

Default Roles can be set via : Workspaces > Extensions.
Private Roles can be set via : Users and User Groups.

Roles

User : Tools to view data will be enabled.
Operator : Tools to view, update and delete data will be enabled.
Administrator : Tools to view, update and delete data will be enabled as well tools to define new data structures if applicable.
Only administrators get access to the “Administration” procedures, e.g. required to import Mobile Mapping Runs, Oblique Projects or to Create new Asset Inventory Themes.