Available Custom Role Permissions - manage-netcloud-access/Available-Custom-Role-Permissions

Managing Identities and Access for NetCloud
NetCloud Feature
Management > Users
Security > NetCloud Access > Federated ID
ft:locale
en-US
ft:sourceName
Paligo_Prod
Document Type
Admin Guide
Configuration Guide

NetCloud custom roles enable granular access control by assigning permissions based on user responsibilities. Some permissions require prerequisite permissions or subscriptions. Permissions are organized by product and apply only to the associated product. The following lists the available permissions, along with any prerequisites and limitations.

Account
Monitor & Schedule Permisson Set
View Activity Logs Permission

Grants the ability to view the Activity Log for an account.

  • Permissions Included:

    • Alerts & Logs page. Include read-only access to the following:

      • Activity Log tab

    • Included in the following System Roles

      • Administration

      • Full Access

      • Read Only

      • Diagnostics

Wireless WAN
Device Management Permission Set
View Device Information Permission

Grants read-only access to device-level dashboards, metrics, and inventory information. Intended for roles that need operational visibility but must not change device state or configuration.

  • Permissions Included:

    • Device Dashboard. Includes read-only access to the following:

      • Home tab

        • Summary

        • Interfaces (excluding GPIO)

        • GeoView

        • Details

        • License (Not included)

        • Install History (Not included)

      • Health tab

        • Summary

        • Uptime

        • Cellular Health

        • AI Insights (Advanced) (Not Included)

        • Traffic Steering (Not included)

      • Data Usage tab

        • Summary

        • WAN

        • Clients

        • Traffic

      • Not included:

        • Configuration tab

        • Security tab

        • Extensibility tab

        • Troubleshooting tab

    • Devices page. Includes read-only access to the following:

      • Routers tab

      • Network Interfaces tab

      • eSIMs tab

      • Not included:

        • Cellular APs tab

        • Mobility Gateways tab

    • Dashboard

      • Devices

      • Private Cellular

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Read Only

      • Diagnostics

Manage Devices Permission

Grants the ability to perform configuration and management actions on individual devices, including modifying router information, initiating selected commands, and managing device-level features.

  • Permissions Included:

    • All prerequisite permissions

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Configuration menu

          • Location Services (only)

          • Geoview

        • Commands menu

          • Reboot

          • Wi-Fi Site Survey

          • Not included:

            • Restore to Defaults

            • Cloudshark

            • Convert to Captive Modem

        • Move menu

        • Not included

          • NetCloud OS menu

          • Remote Connect menu

      • Network Interfaces tab

      • eSIM tab

    • Included in the following System Roles:

      • Administration

      • Full Access

Unregister Devices Permission

Grants the ability to unregister devices, delete network interfaces, and delete eSIMs.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

      • Manage Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Commands menu

          • Unregister (Device)

      • Network Interfaces tab

        • Delete option

      • eSIM tab

        • Delete option

    • Included in the following System Roles:

      • Administration

      • Full Access

Run Ping and Traceroute Permission

Grants the ability to run a ping and traceroute on a device.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Commands menu

          • Ping

          • Traceroute

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

Manage Speedtest Permission

Grants the ability to run a speed test on a device.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Commands menu

          • Speed Test

    • Included in the following System Roles

      • Administration

      • Full Access

      • Diagnostics

Group Management Permission Set
View Group Information Permission

Allows read-only access of group-level dashboards, device lists, geolocation, health, LAN, modem inventory, NetCloud OS pages, and group metrics.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

    • Group Dashboard. Includes read-only access to the following:

      • Home tab

      • GeoView tab

      • Devices tab

      • NetCloud OS tab

      • Modems tab

      • Data Usage tab

        • Summary

        • WAN

        • Clients

        • Traffic

      • Health tab

        • Traffic Steering (not included)

      • LAN Solutions

      • Modems

      • NetCloud OS

      • Not included

        • Configuration tab

        • Extensibility tab

        • Installation tab

        • Settings tab

    • Dashboard

      • Group Status

    • Included in the following System Roles

      • Administration

      • Full Access

      • Read Only

      • Diagnostics

Manage Groups Permission

Permits editing/managing of existing groups including rebooting group devices, editing group settings, and managing group GeoView. This permission does not inherently grant creation or deletion rights.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

      • Manage Devices

      • View Group Information

    • Groups Dashboard. Includes full access to the following:

      • GeoView tab

    • Groups page. Includes full access to the following:

      • Ability to edit a group name from the grid

      • Commands tab

        • Reboot a group

      • Settings tab

        • Edit group settings

      • Not included:

        • Add

        • Delete

        • Configuration

        • NCOS Update

  • Included in the following System Roles

    • Administration

    • Full Access

Add Groups Permission

Grants the ability to add new groups.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

      • View Group Information

    • Groups page. Includes full access to the following:

      • Add

    • Included in the following System Roles

      • Administration

      • Full Access

Delete Groups Permission

Grants the ability to delete groups.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

      • View Group Information

    • Groups page. Includes full access to the following:

      • Delete

    • Included in the following System Roles

      • Administration

      • Full Access

Configuration and Software Management Permission Set
View Device Configuration Permission

Enables read-only access to the configuration details and status for individual devices.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices Page. Includes read-only access to the following:

      • Configuration tab

        • Edit (read only)

        • Export

    • Device Dashboard. Includes read-only access to the following:

      • Configuration tab

        • Edit (read only)

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostic

    • Read Only

Manage Device Configuration Permission

Allows editing individual device configuration and executing certain configuration-related commands.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

      • Manage Devices

      • View Device Configuration Information

    • Device Page. Includes full access to the following:

      • Routers tab

        • Configuration

          • Edit

          • Clear

          • Resume Updates

          • Last Sync Error

          • Import

          • Export

          • Threat Management (enable/disable)

          • Select Wi-Fi Region

          • Security

          • Analytics

        • Commands

          • Restore to Defaults

          • Update IPS Signatures

          • Convert to Captive Modem

    • Device Dashboard. Includes full access to the following:

      • Home tab

      • GeoView tab

      • Devices tab

      • Health tab

        • Traffic Steering not included

      • Not included:

        • Extensibility

        • Installation

        • Data Usage

        • Settings

  • Included in the following System Roles

    • Administration

    • Full Access

View Group Configuration Permission

Grants read-only access to configuration summaries for device groups.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

      • View Groups Information

      • View Device Configuration Information

    • Groups page. Includes read-only access to the following:

      • Configuration tab

        • Summary

        • Edit (read only)

    • Group Dashboard. Includes read-only access to the following:

      • Configuration tab

        • Summary tab

        • Edit tab (read only)

  • Included in the System Roles

    • Administration

    • Full Access

    • Diagnostic

    • Read Only

Manage Group Configuration Permission

Permits editing configuration for a group of devices, accessing group configuration pages and tools, and executing group-wide commands.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

      • Manage Devices

      • View Group Information

      • Manage Groups

      • View Device Configuration Information

      • Manage Device Configuration

      • View Group Configuration Information

    • Groups page. Includes full access to the following:

      • Configuration menu

        • Edit

        • Clear

        • Copy to Groups

        • Import

        • Export

      • Commands menu

        • Restore to Defaults

        • Update IPS Signature

    • Group Dashboard. Includes full access to the following:

      • Configuration menu

        • Summary

        • Edit

        • Tools

  • Included in the following System Roles

    • Administration

    • Full Access

Update Software Permission

Grants the ability to initiate, schedule, retry, cancel, export, and delete NetCloud OS and modem software updates for both devices and groups.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

      • View Group Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • NetCloud OS

          • Retry Update

          • Cancel Update

      • Network Interfaces

        • Commands

          • Manage Modem Software

    • Groups page. Includes full access to the following:

      • OS Updates

        • NCOS

        • LAN Devices

    • Group Dashboard: Includes full access to the following:

      • OS Update tab

        • NCOS software

        • LAN Solutions software

      • Modems tab

        • Summary

        • Updates

        • Schedules

  • Included in the following System Roles

    • Administration

    • Full Access

Remote Connect Permission Set
Manage Console and Device UI Permission

Authorizes use of the Remote Connect Device UI and Console features.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Remote Connect

          • Console

          • Device UI

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics

Manage OOBM Permission

Enables setup, modification, deletion, and connection of serial profiles for remote console access via Out of Band Manager (OOBM).

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers

        • Out of Band Manager

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics

Manage LAN Manager and Quick Connect Permission

Allows use of LAN Manager, adding/editing/deleting LAN profiles, and opening proxy manager for remote LAN access.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices Page. Includes full access to the following:

      • Routers tab

        • LAN Manager

        • Quick Connect

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics

Private 5G
Segments Management Permission Set
View Segments

Grants permission for viewing a list of all segments within a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes read access to the following:

      • Segments page

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

Add and Edit Segments

Grants permission for adding and editing segments within a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View Segments

      • View VRFs

      • View RADIUS Profiles

    • Includes full access to the following:

      • Segments page > Add and Edit menu options

    • Included in the following System Roles:

      • Administration

      • Full Access

Delete Segments

Grants permission for deleting segments within a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View Segments

      • View RADIUS Profiles

    • Includes full access to the following:

      • Segments page > Delete menu option

    • Included in the following System Roles:

      • Administration

      • Full Access

View VRFs

Grants permission for viewing a list of all VRFs within a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes read access to the following:

      • VRFs page

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

Add and Edit VRFs

Grants permission for adding and editing VRFs from a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

    • Includes full access to the following:

      • VRFs page > Add and Edit menu option

    • Included in the following System Roles:

      • Administration

      • Full Access

Delete VRFs

Grants permission for deleting VRFs within a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

    • Includes full access to the following:

      • VRFs page > Delete menu options

    • Included in the following System Roles:

      • Administration

      • Full Access

View RADIUS Profiles

Grants permission for viewing RADIUS profiles in a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes read access to the following:

      • RADIUS page

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

Manage RADIUS Profiles

Grants permission for adding, editing, and deleting RADIUS profiles in a Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

      • View RADIUS Profiles

    • Includes full access to the following:

      • RADIUS page > Add, Edit, Delete menu options

    • Included in the following System Roles:

      • Administration

      • Full Access

Network Management Permissions Set
View Network List

Grants the ability to view and select networks from the List tab on the Networks page for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • NA

    • Includes read access to the following:

      • Networks page > List tab

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

View Fault Management Destination

Grants read-only access to view configured Fault Management (FM) destinations. For customers who have the Advanced Management feature, Ericsson Private 5G can subscribe to FM data for the packet core and radio network. FM data is exposed via an SNMPv3 interface for use by SNMP managers and other Network Monitoring System (NMS) applications.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes read access to the following:

      • Fault Management page

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

Manage Fault Management Destinations

Allows adding and deleting Fault Management (FM) destinations. For customers who have the Advanced Management feature, Ericsson Private 5G can subscribe to FM data for the packet core and radio network. FM data is exposed via an SNMPv3 interface for use by SNMP managers and other Network Monitoring System (NMS) applications.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View Fault Management Destinations

    • Includes full access to the following:

      • Fault Management page > Add and Delete menu options

    • Included in the following System Roles:

      • Administration

      • Full Access

View Dashboards

Grants read only access to the Dashboard page for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View Equipment

      • View VRFs

    • Includes read access to the following:

      • Dashboard page

        • Monitoring tab

        • Uptime tab

        • Health tab

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

Shut Down Networks

Grants permission to shut down a network for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes full access to the following:

      • Networks Page > List tab > Shut Down menu option.

    • Included in the following System Roles:

      • Administration

      • Full Access

View Equipment

Allows user to view Private 5G network equipment details for network controllers and radio networks.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

    • Includes read access to the following:

      • Equipment page > Network Controllers detail pages

      • Equipment page > Radio Network equipment detail pages.

    • Included in the following System Roles:

      • Administration

      • Full Access

Edit Network Controller Configuration

Allows editing of the CS Dummy configurations and configuring of NTP servers for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

      • View Equipment

    • Equipment page. Includes full access to the following:

      • Network Controllers tab > Edit Network Controllers option.

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostic

Enable and Disable Equipment

Allows enabling and disabling of network equipment in a radio network for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

      • View Equipment

    • Networks page. Includes full access to the following:

      • Radio Networks tab > Enable and Disable menu options.

    • Included in the following System Roles:

      • Administration

      • Full Access

Schedule and View Software Upgrades

Grants permission for upgrading Private 5G network software.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

      • View Equipment

    • Includes full access to the following:

      • Equipment Page > Upgrade menu option.

    • Included in the following System Roles:

      • Administration

      • Full Access

Manage API Keys

Grants permission for viewing, resending, editing expiration dates, blocking/unblocking, and deleting API access keys from Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes full access to the following:

      • API Access page.

    • Included in the following System Roles:

      • Administration

      • Full Access

Access Network Controller Console

Grants permission for accessing the Network Controller Console for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

      • View Equipment

    • Networks page. Includes full access to the following:

      • Console tab on the Network Controllers details page.

    • Included in the following System Roles:

      • Administration

      • Full Access

Enable and Disable Cells

Grants permission for enabling and disabling cells in a network for Private 5G.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View VRFs

      • View Equipment

    • Equipment page. Includes full access to the following:

      • Equipment page > Cell View tab > Enable and Disable menu options

    • Included in the following System Roles:

      • Administration

      • Full Access

SIM Management Permission Set
View SIMs

Grants permission for viewing a list of all SIMs within the network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes read access to the following:

      • SIM Cards page

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read only

Add and Edit SIMs

Grants permission for adding new and modifying existing SIMs within the Private 5G network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View SIMs

      • View Segments

    • Includes full access to the following:

      • SIM Cards page > Local SIM Cards > Add and Edit menu options.

    • Included in the following System Roles:

      • Administration

      • Full Access

Delete SIMs

Grants permission for deleting SIMs within the network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View SIMs

    • Includes full access to the following:

      • SIM Cards page > Local SIM Cards > Delete menu option.

    • Included in the following System Roles:

      • Administration

      • Full Access

View SIM Details

Grants permission for viewing detailed SIM Card information, segments, traffic, events, and health data.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View Segments

      • View SIMs

    • Includes read access to the following:

      • SIM Card Information tab

        • Segments tab

        • Traffic tab

        • Event Log tab

      • Watchdog tab

      • Health tab

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read only

Manage UE Trace

Grants permission for adding, deleting, ending, and downloading UE Traces within the Private 5G network. Requires Advanced Management package, the User Equipment Trace tab allows access to detailed device diagnostics for troubleshooting, monitoring, and analysis. Traces can be downloaded for up to one week after completion.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View SIMs

    • Includes full access to the following:

      • SIM Cards page > User Equipment Traces tab

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

View and Add Identity Concealment Keys

Grants permission for viewing and adding SIM Identity Concealment Keys for a Private 5G Network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

    • Includes full access to the following:

      • SIM Cards page > Identity Concealment Keys tab > Add menu option.

    • Included in the following System Roles:

      • Administration

Delete Identity Concealment Keys

Grants permission for deleting SIM Identity Concealment Keys for a Private 5G Network.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View and Add Identity Concealment Keys

    • Includes full access to the following:

      • SIM Cards page > Identity Concealment Keys tab > Delete menu option

    • Included in the following System Roles:

      • Administration

      • Full Access

View Speed Test Results

Grants permission for viewing results of a speed test for a Private 5G SIM.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View SIM

    • Includes read access to the following:

      • SIM Cards > Watchdog

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

      • Read Only

Manage Speed Tests

Grants permission for startingt and deleting speed tests for Private 5G SIM cards.

  • Permissions Included:

    • All prerequisite permissions

      • View Network List

      • View SIM

      • View Speed Test Results

    • Includes read access to the following:

      • SIM Cards > Watchdog > Round Trip time

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics