Permission Groups

A permission group bundles permissions. A user receives permissions only through the groups they are a member of. Groups can also be thought of as user roles.

Prerequisites

You need the Configure X2B (all) permission.
The users have been created (see Managing users).

Procedure

Open the Permission Groups dialog. The search field filters by name.
Click the add button (+) in the title bar.
Enter a name.
Select the System Permissions and the Global Permission.
Add Authorized Elements if required.
Save the group and assign it in the user dialog.

Use the pencil icon to edit a group and the trash can icon to delete it. A group can only be deleted once it no longer has any members.

Settings

Field	Meaning	Note
Id	Internal number	Display only
Name	Name of the group
Comment	Free text
System Permissions	System-wide permissions as checkboxes	See below
Members	Users in the group	Displayed only for existing groups
Global Permission	Default permission for controls, lists and visualizations	See below
Authorized Elements	Permissions for individual controls, lists and visualizations	Add via Add Authorized Elements

System Permissions

Permission	Effect
Customize (names, layout)	Enable layout mode, edit control names and arrangement on the page
Log out user	The user may log out
Restart box	Restart of the system including the operating system
Documents	Access to stored documents, for example energy bills
Configure EMS	Configuration of badges and charging profiles
Remote access	Login with the X2B Remote client app
Change password	The user may change their password
X2B factory reset	Reset to factory settings. Deletes all configuration and data
Configure X2B (all)	Full control over the configuration
Restart X2B	Quick restart of X2B without the operating system
Meter evaluation	Use the Meter query module
Export	Configure and generate exports

Grant Restart box, Restart X2B, Remote access and Configure X2B (all) to system administrators only. No one should hold X2B factory reset permanently. Grant it only immediately before a planned reset.

For a user on a fixed wall tablet, omit Log out user. On shared devices, also omit Change password.

Global Permission

Setting	Effect
(Nothing)	No access
View	View controls, lists and visualizations
Modify	Operate, includes View
Deny	Explicitly prohibits access, even if another group allows it

Authorized Elements

For individual elements, the icons mean: eye for view but not operate, hand for operate and view, prohibition sign for no access.

Notes and Limitations

The permissions of all of a user's groups are combined with OR. Only Deny overrides conflicting permissions.
Elements for which a user lacks at least the View permission are not shown to them.
In a single-family home, one group with the Global Permission Modify is usually sufficient.
In multi-family buildings and commercial properties, plan the groups carefully. If you need Deny, the groups are probably poorly structured.