Permission Settings¶
Permissions are handled on several layers within Data X-Ray.
Role based access controls (RBAC) for users¶
Casefile manager¶
The Casefile manager role allows a user to create casefiles within Data X-Ray. Note that all users can view casefiles that they have access to (see casefiles permissions).
Annotator manager¶
The annotator manager role allows a user to manipulate annotators in Data X-Ray. Note that all users can view annotators in Data X-Ray.
Datasource creator¶
The datasource creator role allows a user to integrate supported datasources in Data X-Ray.
Document category manager¶
Allows a user to create and edit document categories and their LLM prompts. Note that all users can view and use the document categories.
Redactor manager¶
The redactor manager role allows a user to create and edit redactors. Note that all users can view redactors available.
Label manager¶
The label manager role allows a user to create labels. All users can view and use labels in Data X-Ray.
List all organization datasources¶
The list all organization role allows a user to list all datasources on the Datasources page, to see their status. However, a user with this role will not necessarily be able to view the contents of any individual datasource (which is controlled by the datasource permissions).
Diagnostics manager¶
The diagnostics manager role allows a user to create diagnostics export. To see how a diagnostics manager can export diagnostics file follow the user guide.
User types¶
Super admin¶
A super admin user can manipulate organizations and users within an organization. The super admin should NOT ever use the app directly and is only meant to use the admin console sister application for the Data X-Ray. The super admin has full access to most functionality in the Data X-Ray as well as reassign permissions. This role should therefore be limited to specific persons.
Organizational admin¶
An organization admin can perform all RBAC-defined actions in the application and can manage users in their organization.
User¶
The user type is the main type of user within the app. The access to the app is essentially read-only unless other RBAC controls (see above) are also provided to this user.