Role permissions settings

Certificates

Certificate	Description
Add from file	Allows installing certificates on the unit.
Add from CA (FNMT)	Allows performing operations related to FNMT.
Edit	Allows users to: Disable/Enable a certificate. Edit the certificate alias and the use reason field. Set the certificate PIN.
Replace	Grants permission to replace certificates.
Delete	Allows deleting a certificate along with its associated private key. This action is permanent.
Manage owner	Allows editing or assigning an owner to a certificate. Owners can use the certificate, overriding all policies.

Firmaprofesional	Description
Issue from Firmaprofesional	Grants permission to use the API to request and consolidate certificates on the server. The generated certificates will be assigned to the groups defined in the role.
Download Firmaprofesional certificate	Allows certificate holders to download a copy of their certificate from the personal area. Each certificate can be downloaded once.
Allow operator copy	Allows users to obtain a backup copy of the certificate.

Pending	Description
Install	Allows users to upload personal certificates for later activation.
Delete	Grants permission to delete activation-pending certificates.

CA	Description
Install	Grants users permission to install CA certificates on the unit.
Delete	Allows users to delete CA certificates.

Email	Description
Install	Allows users to install email certificates on the unit.
Delete	Grants permission to delete email certificates.

Alerts	Description
View	Grants users permission to view any configured certificate alerts.
Create	Allows users to create certificate alerts.
Edit	Allow users to edit any already created certificate alerts.
Delete	Grants users permission to delete any already created certificate alerts.

Policies

Section	Permissions	Description
User Policies	View, Edit, Delete, and Create	Allows to view, edit, delete, and create policies.
Websites	View, Edit, Delete, and Create	Grants permission to view, edit, delete, and create site groups.
Applications	View, Edit, Delete, and Create	Grants permission to view, edit, delete, and create application groups.

tip

For these settings to be applicable, the user's role must also be assigned to the policy. For more information, see Policy operations.

Events

Section	Description
Users	Allows users to see events related to other users within the domain scoped by this role.
Certificates	Grants permission to view events related to certificates in the certificate group assigned to this role.
Policies	Allows users to view events related to policies assigned to this role.
All	Grants permission to view all event logs.

Access

Domain Users	Description
View	Allows users to view domain settings and users.
Edit	Grants users permission to edit domain settings and users.

System

Section	Permissions	Description
Services**	View and Edit	Allows users to view and edit the Services tab in the System section.
External Log Services	View and Edit	Grants users permission to view and edit external log services configuration.
High Availability	View and Edit	Grants users permission to view and edit the HA tab in the System section.
System Log	View	Allows users to view the audit list tab in the Events section.

Unit

Section	Description
View	Allows users to view system configuration (Unit, Server configuration, and Agent configuration tabs).
Edit	Grants permission to view and edit system configuration (Unit, Server configuration, and Agent configuration tabs).

Server Logs	Description
Download	Allows users to download server logs.

Network	Description
View	Grants users permission to view the server's network configuration and service ports.
Edit	Allows users to view and edit the server's network configuration and service ports.

Backup	Description
Generate	Grants users permission to generate a backup copy of the server database.
Restore	Allows users to restore a backup copy of the server database.

Maintenance	Description
Upgrade/Downgrade	Enables users to upgrade the server version or revert to a previous version.
Restart/Shutdown	Grants users permission to manage server restart and shutdown operations from the admin console.

Agents

Section	Description
Manage	Grants users permission to view the Agent Management tab in the System section.
Update Packages	Allows users to view the Agent Updates tab in the System section.