Available Custom Role Permissions - manage-netcloud-access/Available-Custom-Role-Permissions

Managing Identities and Access for NetCloud
NetCloud Feature
Management > Users
Security > NetCloud Access > Federated ID
ft:locale
en-US
ft:sourceName
Paligo_Prod
Document Type
Admin Guide
Configuration Guide

NetCloud allows permissions to be assigned to a custom role. Some permissions have prerequisite permissions and subscription requirements. The following lists the available permissions, their prerequisite permissions, and limitations.

Device Management Permission Set
View Device Information Permission

Grants read-only access to device-level dashboards, metrics, and inventory information. Intended for roles that need operational visibility but must not change device state or configuration.

  • Permissions Included:

    • Device Dashboard. Includes read-only access to the following:

      • Home tab

        • Summary

        • Interfaces (excluding GPIO)

        • GeoView

        • Details

        • License (Not included)

        • Install History (Not included)

      • Health tab

        • Summary

        • Uptime

        • Cellular Health

        • AI Insights (Advanced) (Not Included)

        • Traffic Steering (Not included)

      • Not included:

        • Configuration tab

        • Data Usage tab

        • Security tab

        • Extensibility tab

        • Troubleshooting tab

    • Devices page. Includes read-only access to the following:

      • Routers tab

      • Network Interfaces tab

      • eSIMs tab

      • Not included:

        • Cellular APs tab

        • Mobility Gateways tab

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Read Only

      • Diagnostics

Manage Devices Permission

Grants the ability to perform configuration and management actions on individual devices, including modifying router information, initiating selected commands, and managing device-level features.

  • Permissions Included:

    • All prerequisite permissions

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Configuration menu

          • Location Services (only)

          • Geoview

        • Commands menu

          • Reboot

          • Wi-Fi Site Survey

          • Not included:

            • Restore to Defaults

            • Cloudshark

            • Convert to Captive Modem

        • Move menu

        • Not included

          • NetCloud OS menu

          • Remote Connect menu

      • Network Interfaces tab

      • eSIM tab

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

Unregister Devices Permission

Grants the ability to unregister devices, delete network interfaces, and delete eSIMs.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

      • Manage Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Commands menu

          • Unregister (Device)

      • Network Interfaces tab

        • Delete option

      • eSIM tab

        • Delete option

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

Run Ping and Traceroute Permission

Grants the ability to run a ping and traceroute on a device.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Commands menu

          • Ping

          • Traceroute

    • Included in the following System Roles:

      • Administration

      • Full Access

      • Diagnostics

Manage Speedtest Permission

Grants the ability to run a speed test on a device.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Commands menu

          • Speed Test

    • Included in the following System Roles

      • Administration

      • Full Access

      • Diagnostics

Monitor & Schedule Permisson Set
View Activity Logs Permission

Grants the ability to view the Activity Log for an account.

  • Permissions Included:

    • Alerts & Logs page. Include read-only access to the following:

      • Activity Log tab

    • Included in the following System Roles

      • Administration

      • Full Access

      • Read Only

      • Diagnostics

Group Management Permission Set
View Group Information Permission

Allows read-only access of group-level dashboards, device lists, geolocation, health, LAN, modem inventory, NetCloud OS pages, and group metrics.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

    • Group Dashboard. Includes read-only access to the following:

      • Home tab

      • GeoView tab

      • Devices tab

      • NetCloud OS tab

      • Modems tab

      • Health tab

        • Traffic Steering (not included)

      • LAN Solutions

      • Modems

      • NetCloud OS

      • Not included

        • Configuration tab

        • Data Usage tab

        • Extensibility tab

        • Installation tab

        • Settings tab

    • Dashboard

      • Group Status

    • Included in the following System Roles

      • Administration

      • Full Access

      • Read Only

      • Diagnostics

Manage Groups Permission

Permits editing/managing of existing groups including rebooting group devices, editing group settings, and managing group GeoView. This permission does not inherently grant creation or deletion rights.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

      • Manage Devices

      • View Group Information

    • Groups Dashboard. Includes full access to the following:

      • GeoView tab

    • Groups page. Includes full access to the following:

      • Ability to edit a group name from the grid

      • Commands tab

        • Reboot a group

      • Settings tab

        • Edit group settings

      • Not included:

        • Add

        • Delete

        • Configuration

        • NCOS Update

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics

Add Groups Permission

Grants the ability to add new groups.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

      • View Group Information

    • Groups page. Includes full access to the following:

      • Add

    • Included in the following System Roles

      • Administration

      • Full Access

      • Diagnostics

Delete Groups Permission

Grants the ability to delete groups.

  • Permissions Included:

    • All prerequisite permissions:

      • View Device Information

      • View Group Information

    • Groups page. Includes full access to the following:

      • Delete

    • Included in the following System Roles

      • Administration

      • Full Access

      • Diagnostics

Configuration and Software Management Permission Set
View Device Configuration Information Permission

Enables read-only access to the configuration details and status for individual devices.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices Page. Includes read-only access to the following:

      • Configuration tab

        • Edit (read only)

        • Export

    • Device Dashboard. Includes read-only access to the following:

      • Configuration tab

        • Edit (read only)

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostic

Manage Device Configuration Permission

Allows editing individual device configuration and executing certain configuration-related commands.

  • Permissions Included

    • All prerequisite permissions

      • View Device Information

      • Manage Devices

      • View Device Configuration Information

    • Device Page. Includes full access to the following:

      • Routers tab

        • Configuration

          • Edit

          • Clear

          • Resume Updates

          • Last Sync Error

          • Import

          • Export

          • Threat Management (enable/disable)

          • Select Wi-Fi Region

          • Security

          • Analytics

        • Commands

          • Restore to Defaults

          • Update IPS Signatures

          • Convert to Captive Modem

    • Device Dashboard. Includes full access to the following:

      • Home tab

      • GeoView tab

      • Devices tab

      • Health tab

        • Traffic Steering not included

      • Not included:

        • Extensibility

        • Installation

        • Data Usage

        • Settings

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostic

View Group Configuration Information Permission

Grants read-only access to configuration summaries for device groups.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

      • View Groups Information

      • View Device Configuration Information

    • Groups page. Includes read-only access to the following:

      • Configuration tab

        • Summary

        • Edit (read only)

    • Group Dashboard. Includes read-only access to the following:

      • Configuration tab

        • Summary tab

        • Edit tab (read only)

  • Included in the System Roles

    • Administration

    • Full Access

    • Diagnostic

Manage Group Configuration Permission

Permits editing configuration for a group of devices, accessing group configuration pages and tools, and executing group-wide commands.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

      • Manage Devices

      • View Group Information

      • Manage Groups

      • View Device Configuration Information

      • Manage Device Configuration

      • View Group Configuration Information

    • Groups page. Includes full access to the following:

      • Configuration menu

        • Edit

        • Clear

        • Copy to Groups

        • Import

        • Export

      • Commands menu

        • Restore to Defaults

        • Update IPS Signature

    • Group Dashboard. Includes full access to the following:

      • Configuration menu

        • Summary

        • Edit

        • Tools

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostic

Update Software Permission

Grants the ability to initiate, schedule, retry, cancel, export, and delete NetCloud OS and modem software updates for both devices and groups.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

      • View Group Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • NetCloud OS

          • Retry Update

          • Cancel Update

      • Network Interfaces

        • Commands

          • Manage Modem Software

    • Groups page. Includes full access to the following:

      • OS Updates

        • NCOS

        • LAN Devices

    • Group Dashboard: Includes full access to the following:

      • OS Update tab

        • NCOS software

        • LAN Solutions software

      • Modems tab

        • Summary

        • Updates

        • Schedules

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostic

Remote Connect Permission Set
Manage Console and Device UI Permission

Authorizes use of the Remote Connect Device UI and Console features.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers tab

        • Remote Connect

          • Console

          • Device UI

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics

Manage OOBM Permission

Enables setup, modification, deletion, and connection of serial profiles for remote console access via Out of Band Manager (OOBM).

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices page. Includes full access to the following:

      • Routers

        • Out of Band Manager

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics

Manage LAN Manager and Quick Connect Permission

Allows use of LAN Manager, adding/editing/deleting LAN profiles, and opening proxy manager for remote LAN access.

  • Permissions Included

    • All prerequisite permissions:

      • View Device Information

    • Devices Page. Includes full access to the following:

      • Routers tab

        • LAN Manager

        • Quick Connect

  • Included in the following System Roles

    • Administration

    • Full Access

    • Diagnostics