Skip to main content

DP-Role-based Permissions in L7|ESP 3.0

Analysis Permissions

Object Type

Permission

Description

Pipeline

Create

Create a Pipeline in the Analysis app or via API call

Update

Edit a Pipeline in the Analysis app or via API call, including adding and removing tasks and editing other Pipeline-level metadata

Delete

Archive/Unarchive a Pipeline in the Analysis app or via API call

Import

Import a Pipeline via HUB or API call

Note

Ordinarily, granting Import Pipeline permission means an Administrator should also grant Import Task and Import Report Definition permissions

Execute

Run a Pipeline in the Analysis app or LIMS Pipeline Protocol

Pipeline Instance

Create

Unused, Pipeline Instance creation is controlled by the Execute Pipeline permission

Update

Update a Pipeline Instance, including pausing, killing, and restarting the instance

Delete

Archive/Unarchive a Pipeline Instance

Import

Unused at this time

Execute

Unused at this time

Report

Create

Create a Report, including Pipeline-generated Reports and operational Reports created in the UI or via API call

Update

Update an operational Report in the UI or via API call, or update a Pipeline-generated Report via API call including the Report name, tags, description, Report groups, and the elements (widgets) used for the Report

Delete

Archive/Unarchive an operational or Pipeline-generated Report

Import

Import an operational Report via HUB or API call

Execute

Unused at this time

Report Template

Create

Create a Pipeline-associated Report Template in the Analysis app or via API call

Update

Update a Pipeline-associated Report Template in the Analysis app or via API call, including changing the Report Template name and the associated widgets

Delete

Archive/Unarchive a Pipeline-associated Report Template via API call

Import

Import a Report Template via HUB or API call

Note

Importing a Pipeline with an associated Report Template requires Import Pipeline and Import Report Template permissions

Execute

Unused at this time

Task

Create

Create a Task in the Analysis app or via API call

Update

Update a Task in the Analysis app or via API call, including changing the Task name, description, tags, associated Task files, and the Task script

Delete

Archive/Unarchive a Task in the UI or via API call

Import

Import a Task via HUB or API call

Note

Importing a Pipeline with associated Tasks requires Import Pipeline and Import Task permissions

Execute

Unused at this time

Task Instance

Create

Unused, Task Instances are created at the same time as Pipeline Instances and controlled by the Execute Pipeline permission

Update

Update a Task Instance, including associating a Task-generated file and status messages with the Task Instance

Note

Ordinarily, a role with "Execute Pipeline" permissions should also have the Update Task Instance permission

Delete

Archive/Unarchive a Task Instance via API call

Import

Unused at this time

Execute

Unused at this time

Builders Permissions

Object Type

Permission

Description

Container Type

Create

Create a Container Type in the L7|MASTER app or via API call

Update

Update a Container Type in the L7|MASTER app or via API call, including changing the Container Type name, description, tags, storage parameters, dimensions, or custom fields

Delete

Archive/Unarchive a Container Type in the UI or via API call

Import

Import a Container Type via HUB or API call

Execute

Unused at this time

Customer

Create

Create a Customer in the L7|MASTER app or via API call

Update

Update a Customer in the L7|MASTER app or via API call, including changing the Customer name, description, tags, billing address, and shipping address

Delete

Archive/Unarchive a Customer in the UI or via API call

Import

Import a Customer via HUB or API call

Execute

Unused at this time

Param Group

Create

Create a Param Group in the L7|MASTER app or via API call

Update

Update a Param Group in the L7|MASTER app or via API call, including changing the Param Group name, description, tags, and parameter settings

Delete

Archive/Unarchive a Param Group via in the UI or via API call

Import

Import a Param Group via HUB or API call

Execute

Unused at this time

Protocol

Create

Create a Protocol in the L7|MASTER app or via API call

Update

Update a Protocol in the L7|MASTER app or via API call, including changing the Protocol name, description, tags, instructions, custom fields, Protocol actions, and Flex View

Delete

Archive/Unarchive a Protocol in the UI or via API call

Import

Import a Protocol via HUB or API call

Execute

Unused at this time

Code authoring

Controls whether the User can edit the initialContext and use the Generic renderer widget in Flex View Designer

Sample Type

Create

Create an Entity Type in the L7|MASTER app or via API call

Update

Update an Entity Type in the L7|MASTER app or via API call, including changing the Entity Type name, description, tags, custom fields, and Detail View Template

Delete

Archive/Unarchive an Entity Type in the UI or via API call

Import

Import an Entity Type via HUB or API call

Execute

Unused at this time

Workflow

Create

Create a Workflow in the L7|MASTER app or via API call

Update

Update a Workflow in the L7|MASTER app or via API call, including changing the Workflow name, description, tags, associated Protocols, and data links

Delete

Archive/Unarchive a Workflow via in the UI or via API call

Import

Import a Workflow via HUB or API call

Execute

Unused at this time

Workflow Chain

Create

Create a Workflow Chain in the L7|MASTER app or via API call

Update

Update a Workflow Chain in the L7|MASTER app or via API call, including changing the Workflow Chain name, description, tags, nodes, and transitions

Delete

Archive/Unarchive a Workflow Chain in the UI or via API call

Import

Import a Workflow Chain via HUB or API call

Execute

Unused at this time

Workflowable Resource Class

Create

Create an Entity Class in the L7|MASTER app or via API call

Update

Update an Entity Class in the L7|MASTER app or via API call, including changing the Entity Class name, description, tags, and custom views

Delete

Archive/Unarchive an Entity Class in the UI or via API call

Import

Import an Entity Class via HUB or API call

Execute

Unused at this time

Workflow Chain Plan

Create

Create a Workflow Chain Plan in the Projects app or via API call

Update

Update the projected duration of each Workflow in the Workflow Chain Instance

Delete

Archive/Unarchive a Workflow Chain Plan in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

IAM Permissions

Object Type

Permission

Description

Workgroup

Create

Create a Workgroup in the IAM app or via API call

Update

Update a Workgroup in the IAM app or via API call, including changing the Workgroup name, description, tags, and associated Users

Delete

Deactivate/Reactivate a Workgroup in the UI or via API call

Import

Import a Workgroup via HUB or API call

Execute

Unused at this time

Read Permission

Create

Associate an object with a Workgroup via API call to the /api/labs/associateresources endpoint

Update

Unused at this time

Delete

Unused at this time

Import

Unused at this time

Execute

Unused at this time

Role

Create

Create a Role in the IAM app or via API call

Update

Update a Role in the IAM app or via API call, including changing the Role name, description, tags, permissions, applications, and associated Users

Delete

Deactivate/Reactivate a Role in the UI or via API call

Import

Import a Role via HUB or API call

Execute

Unused at this time

User

Create

Create a User in the IAM app or via API call

Update

Update a User in the IAM app or via API call, including changing the User's name, email, username, password, description, force password reset, number of hours account is valid, and associated Roles and Workgroups

Delete

Deactivate/Reactivate a User in the UI or via API call

Import

Import a User via API call

Execute

Unused at this time

Ingest Permissions

Object Type

Permission

Description

Ingest Definition

Create

Create an Ingest Definition in the Ingest app or via API call

Note

An Ingest Definition is the configuration that controls how to interpret an ingested file

Update

Update an Ingest Definition in the Ingest app or via API call, including changing the Ingest Definition name, description, tags, pre-processor, post-processor, and field mappings

Delete

Archive/Unarchive an Ingest Definition in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Ingest Instance

Create

Create an Ingest Instance in the Ingest app or via API call

Note

An Ingest Instance is the association between a particular file to ingest, the Ingest Definition to use when parsing the file, and the ingested results (Entities and their metadata)

Update

Update an Ingest Instance in the Ingest app or via API call, including changing the Ingest Instance name, description, tags, and associated Ingest Definition

Delete

Archive/Unarchive an Ingest Instance via in the UI or via API call

Import

Unused at this time

Execute

Submit an Ingest Instance for processing

Inventory & Billing Permissions

Object Type

Permission

Description

Address

Create

Unused at this time

Update

Unused at this time

Delete

Unused at this time

Import

Unused at this time

Execute

Unused at this time

Item Type

Create

Create an Item Type in the L7|MASTER app or via API call

Update

Update an Item Type in the L7|MASTER app or via API call, including changing the Item Type name, description, tags, barcode (UPC), units, reorder threshold, reorder amount, Vendors, custom fields, and ID Sequence(s)

Delete

Archive/Unarchive an Item Type in the UI or via API call

Import

Import an Item Type via HUB or API call

Execute

Unused at this time

Service Type

Create

Create a Service Type in the L7|MASTER app or via API call

Update

Update a Service Type in the L7|MASTER app or via API call, including changing the Service Type name, description, tags, pricing, and adding/removing/editing customer-specific pricing

Delete

Archive/Unarchive a Service Type in the UI or via API call

Import

Import a Service Type via HUB or API call

Execute

Unused at this time

Vendor

Create

Create a Vendor in the L7|MASTER app or via API call

Update

Update a Vendor in the L7|MASTER app or via API call, including changing the Vendor name, description, tags, billing address, and shipping address

Delete

Archive/Unarchive a Vendor in the UI or via API call

Import

Import a Vendor via HUB or API call

Execute

Unused at this time

Item

Create

Create an Item in the Inventory app or via API call

Update

Update an Item in the Inventory app or via API call, including changing the Item name, description, tags, barcode, Vendor, lot number, serial id, status, expiration date, and quantity (usage entry)

Note

This permission is also necessary to use the Inventory item use field type in LIMS Worksheets

Delete

Archive/Unarchive an Item in the UI or via API call

Import

Import an Item via HUB or API call

Execute

Unused at this time

Container

Create

Create a Container in the Locations app, LIMS app, or via API call

Update

Update a Container in the Locations app or via API call, including changing the Container name, description, tags, barcode, custom field data, and contents (Entities, Items, and/or nested Containers).

Delete

Archive/Unarchive a Container in the UI or via API call

Import

Import a Container via HUB or API call

Execute

Unused at this time

Service

Create

Create a Service (a billing charge record) via API call

Update

Update a Service via API call, including changing the Service name, description, tags, and barcode

Note

Changing the price of a service post-creation is not supported

Delete

Archive/Unarchive a Service via API call

Import

Import a Service via API call

Execute

Unused at this time

LIMS Permissions

Object Type

Permission

Description

Experiment

Create

Create an Experiment in the Projects app or via API call

Update

Update an Experiment in the Projects app or via API call, including changing the Experiment name, description, tags, and included Entities

Delete

Archive/Unarchive an Experiment in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Project

Create

Create a Project in the Projects app or via API call

Update

Update a Project in the Projects app or via API call, including changing the Project name, description, and tags

Delete

Archive/Unarchive a Project via API call

Import

Import a Project via HUB or API call

Execute

Unused at this time

Sample

Create

Create an Entity in the Projects app, Entities app, Entity Class-specific apps (Samples), or via API call

Update

Update an Entity in the Entities app, Entity Class-specific apps (Samples), or via API call, including changing the Entity name, description, tags, barcode, and custom field data

Delete

Archive/Unarchive an Entity in the UI or via API call

Import

Import an Entity via HUB or API call

Execute

Unused at this time

Sample Sheet

Create

Create a Sample Sheet in the LIMS app or via API call

Update

Update a Sample Sheet in the LIMS app or via API call, including changing the Sample Sheet name, description, tags, included Entities, and Sample Sheet data

Delete

Archive/Unarchive a Sample Sheet in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Force update

Edit data in completed LIMS Worksheets

Force unlock

Unlock a Sample Sheet locked by a different User

Workflow Chain Instance

Create

Create a Workflow Chain Instance (Experiment using a Workflow Chain) in the Projects app or via API call

Update

Update a Workflow Chain Instance in the UI or via API call, specifically transitioning Entities to the next node(s) in the Workflow Chain

Delete

Archive/Unarchive a Workflow Chain Instance in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Uncategorized Permissions

Object Type

Permission

Description

Object Type

Permission

Description

Notebook (only for Users with Notebook license)

Create

Create a Notebook in the Notebooks app or via API call

Update

Update a Notebook in the Notebooks app or via API call, including changing the Notebook name, description, and tags

Delete

Archive/Unarchive a Notebook in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Notebook Entry

Create

Create a Notebook Entry in the Notebooks app or via API call

Update

Update a Notebook Entry in the Notebooks app or via API call, including changing the Notebook Entry name, description, tags, and entry information (widgets with configuration)

Delete

Archive/Unarchive a Notebook Entry in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Code authoring

Controls whether the user can use the Generic renderer widget

Notebook Entry Template

Create

Create a Notebook Entry Template in the Notebooks app or via API call

Update

Update a Notebook Entry Template in the Notebooks app or via API call, including changing the Notebook Entry Template name, description, tags, and entry information (widgets with configuration)

Delete

Archive/Unarchive a Notebook Entry Template in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Code authoring

Controls whether the user can use the Generic renderer widget

Collection

Create

Create a Collection in the HUB app or via API call

Update

Update a Collection in the HUB app or via API call, including changing the Collection name, description, tags, and included content

Delete

Archive/Unarchive a Collection in the UI or via API call

Import

Import a Collection via HUB or API call

Execute

Unused at this time

Configuration

Create

Create a Configuration in the Config app or via API call

Note

This permission is also used to Import a Configuration via HUB or API call

Update

Update a Configuration in the Config app or via API call, including changing the Configuration name, config values, and secrets values

Delete

Archive/Unarchive a Configuration in the UI or via API call

Import

Unused at this time

Execute

Unused at this time

Internationalization

Create

Unused at this time

Update

Unused at this time

Delete

Unused at this time

Import

Import an Internationalization bundle via the Translations app or API call

Execute

Unused at this time