DP-Role-based Permissions in L7|ESP 3.0
Analysis Permissions
Object Type | Permission | Description |
---|---|---|
Pipeline | Create | Create a Pipeline in the Analysis app or via API call |
Update | Edit a Pipeline in the Analysis app or via API call, including adding and removing tasks and editing other Pipeline-level metadata | |
Delete | Archive/Unarchive a Pipeline in the Analysis app or via API call | |
Import | Import a Pipeline via HUB or API call NoteOrdinarily, granting Import Pipeline permission means an Administrator should also grant Import Task and Import Report Definition permissions | |
Execute | Run a Pipeline in the Analysis app or LIMS Pipeline Protocol | |
Pipeline Instance | Create | Unused, Pipeline Instance creation is controlled by the Execute Pipeline permission |
Update | Update a Pipeline Instance, including pausing, killing, and restarting the instance | |
Delete | Archive/Unarchive a Pipeline Instance | |
Import | Unused at this time | |
Execute | Unused at this time | |
Report | Create | Create a Report, including Pipeline-generated Reports and operational Reports created in the UI or via API call |
Update | Update an operational Report in the UI or via API call, or update a Pipeline-generated Report via API call including the Report name, tags, description, Report groups, and the elements (widgets) used for the Report | |
Delete | Archive/Unarchive an operational or Pipeline-generated Report | |
Import | Import an operational Report via HUB or API call | |
Execute | Unused at this time | |
Report Template | Create | Create a Pipeline-associated Report Template in the Analysis app or via API call |
Update | Update a Pipeline-associated Report Template in the Analysis app or via API call, including changing the Report Template name and the associated widgets | |
Delete | Archive/Unarchive a Pipeline-associated Report Template via API call | |
Import | Import a Report Template via HUB or API call NoteImporting a Pipeline with an associated Report Template requires Import Pipeline and Import Report Template permissions | |
Execute | Unused at this time | |
Task | Create | Create a Task in the Analysis app or via API call |
Update | Update a Task in the Analysis app or via API call, including changing the Task name, description, tags, associated Task files, and the Task script | |
Delete | Archive/Unarchive a Task in the UI or via API call | |
Import | Import a Task via HUB or API call NoteImporting a Pipeline with associated Tasks requires Import Pipeline and Import Task permissions | |
Execute | Unused at this time | |
Task Instance | Create | Unused, Task Instances are created at the same time as Pipeline Instances and controlled by the Execute Pipeline permission |
Update | Update a Task Instance, including associating a Task-generated file and status messages with the Task Instance NoteOrdinarily, a role with "Execute Pipeline" permissions should also have the Update Task Instance permission | |
Delete | Archive/Unarchive a Task Instance via API call | |
Import | Unused at this time | |
Execute | Unused at this time |
Builders Permissions
Object Type | Permission | Description |
---|---|---|
Container Type | Create | Create a Container Type in the L7|MASTER app or via API call |
Update | Update a Container Type in the L7|MASTER app or via API call, including changing the Container Type name, description, tags, storage parameters, dimensions, or custom fields | |
Delete | Archive/Unarchive a Container Type in the UI or via API call | |
Import | Import a Container Type via HUB or API call | |
Execute | Unused at this time | |
Customer | Create | Create a Customer in the L7|MASTER app or via API call |
Update | Update a Customer in the L7|MASTER app or via API call, including changing the Customer name, description, tags, billing address, and shipping address | |
Delete | Archive/Unarchive a Customer in the UI or via API call | |
Import | Import a Customer via HUB or API call | |
Execute | Unused at this time | |
Param Group | Create | Create a Param Group in the L7|MASTER app or via API call |
Update | Update a Param Group in the L7|MASTER app or via API call, including changing the Param Group name, description, tags, and parameter settings | |
Delete | Archive/Unarchive a Param Group via in the UI or via API call | |
Import | Import a Param Group via HUB or API call | |
Execute | Unused at this time | |
Protocol | Create | Create a Protocol in the L7|MASTER app or via API call |
Update | Update a Protocol in the L7|MASTER app or via API call, including changing the Protocol name, description, tags, instructions, custom fields, Protocol actions, and Flex View | |
Delete | Archive/Unarchive a Protocol in the UI or via API call | |
Import | Import a Protocol via HUB or API call | |
Execute | Unused at this time | |
Code authoring | Controls whether the User can edit the | |
Sample Type | Create | Create an Entity Type in the L7|MASTER app or via API call |
Update | Update an Entity Type in the L7|MASTER app or via API call, including changing the Entity Type name, description, tags, custom fields, and Detail View Template | |
Delete | Archive/Unarchive an Entity Type in the UI or via API call | |
Import | Import an Entity Type via HUB or API call | |
Execute | Unused at this time | |
Workflow | Create | Create a Workflow in the L7|MASTER app or via API call |
Update | Update a Workflow in the L7|MASTER app or via API call, including changing the Workflow name, description, tags, associated Protocols, and data links | |
Delete | Archive/Unarchive a Workflow via in the UI or via API call | |
Import | Import a Workflow via HUB or API call | |
Execute | Unused at this time | |
Workflow Chain | Create | Create a Workflow Chain in the L7|MASTER app or via API call |
Update | Update a Workflow Chain in the L7|MASTER app or via API call, including changing the Workflow Chain name, description, tags, nodes, and transitions | |
Delete | Archive/Unarchive a Workflow Chain in the UI or via API call | |
Import | Import a Workflow Chain via HUB or API call | |
Execute | Unused at this time | |
Workflowable Resource Class | Create | Create an Entity Class in the L7|MASTER app or via API call |
Update | Update an Entity Class in the L7|MASTER app or via API call, including changing the Entity Class name, description, tags, and custom views | |
Delete | Archive/Unarchive an Entity Class in the UI or via API call | |
Import | Import an Entity Class via HUB or API call | |
Execute | Unused at this time | |
Workflow Chain Plan | Create | Create a Workflow Chain Plan in the Projects app or via API call |
Update | Update the projected duration of each Workflow in the Workflow Chain Instance | |
Delete | Archive/Unarchive a Workflow Chain Plan in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time |
IAM Permissions
Object Type | Permission | Description |
---|---|---|
Workgroup | Create | Create a Workgroup in the IAM app or via API call |
Update | Update a Workgroup in the IAM app or via API call, including changing the Workgroup name, description, tags, and associated Users | |
Delete | Deactivate/Reactivate a Workgroup in the UI or via API call | |
Import | Import a Workgroup via HUB or API call | |
Execute | Unused at this time | |
Read Permission | Create | Associate an object with a Workgroup via API call to the |
Update | Unused at this time | |
Delete | Unused at this time | |
Import | Unused at this time | |
Execute | Unused at this time | |
Role | Create | Create a Role in the IAM app or via API call |
Update | Update a Role in the IAM app or via API call, including changing the Role name, description, tags, permissions, applications, and associated Users | |
Delete | Deactivate/Reactivate a Role in the UI or via API call | |
Import | Import a Role via HUB or API call | |
Execute | Unused at this time | |
User | Create | Create a User in the IAM app or via API call |
Update | Update a User in the IAM app or via API call, including changing the User's name, email, username, password, description, force password reset, number of hours account is valid, and associated Roles and Workgroups | |
Delete | Deactivate/Reactivate a User in the UI or via API call | |
Import | Import a User via API call | |
Execute | Unused at this time |
Ingest Permissions
Object Type | Permission | Description |
---|---|---|
Ingest Definition | Create | Create an Ingest Definition in the Ingest app or via API call NoteAn Ingest Definition is the configuration that controls how to interpret an ingested file |
Update | Update an Ingest Definition in the Ingest app or via API call, including changing the Ingest Definition name, description, tags, pre-processor, post-processor, and field mappings | |
Delete | Archive/Unarchive an Ingest Definition in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Ingest Instance | Create | Create an Ingest Instance in the Ingest app or via API call NoteAn Ingest Instance is the association between a particular file to ingest, the Ingest Definition to use when parsing the file, and the ingested results (Entities and their metadata) |
Update | Update an Ingest Instance in the Ingest app or via API call, including changing the Ingest Instance name, description, tags, and associated Ingest Definition | |
Delete | Archive/Unarchive an Ingest Instance via in the UI or via API call | |
Import | Unused at this time | |
Execute | Submit an Ingest Instance for processing |
Inventory & Billing Permissions
Object Type | Permission | Description |
---|---|---|
Address | Create | Unused at this time |
Update | Unused at this time | |
Delete | Unused at this time | |
Import | Unused at this time | |
Execute | Unused at this time | |
Item Type | Create | Create an Item Type in the L7|MASTER app or via API call |
Update | Update an Item Type in the L7|MASTER app or via API call, including changing the Item Type name, description, tags, barcode (UPC), units, reorder threshold, reorder amount, Vendors, custom fields, and ID Sequence(s) | |
Delete | Archive/Unarchive an Item Type in the UI or via API call | |
Import | Import an Item Type via HUB or API call | |
Execute | Unused at this time | |
Service Type | Create | Create a Service Type in the L7|MASTER app or via API call |
Update | Update a Service Type in the L7|MASTER app or via API call, including changing the Service Type name, description, tags, pricing, and adding/removing/editing customer-specific pricing | |
Delete | Archive/Unarchive a Service Type in the UI or via API call | |
Import | Import a Service Type via HUB or API call | |
Execute | Unused at this time | |
Vendor | Create | Create a Vendor in the L7|MASTER app or via API call |
Update | Update a Vendor in the L7|MASTER app or via API call, including changing the Vendor name, description, tags, billing address, and shipping address | |
Delete | Archive/Unarchive a Vendor in the UI or via API call | |
Import | Import a Vendor via HUB or API call | |
Execute | Unused at this time | |
Item | Create | Create an Item in the Inventory app or via API call |
Update | Update an Item in the Inventory app or via API call, including changing the Item name, description, tags, barcode, Vendor, lot number, serial id, status, expiration date, and quantity (usage entry) NoteThis permission is also necessary to use the Inventory item use field type in LIMS Worksheets | |
Delete | Archive/Unarchive an Item in the UI or via API call | |
Import | Import an Item via HUB or API call | |
Execute | Unused at this time | |
Container | Create | Create a Container in the Locations app, LIMS app, or via API call |
Update | Update a Container in the Locations app or via API call, including changing the Container name, description, tags, barcode, custom field data, and contents (Entities, Items, and/or nested Containers). | |
Delete | Archive/Unarchive a Container in the UI or via API call | |
Import | Import a Container via HUB or API call | |
Execute | Unused at this time | |
Service | Create | Create a Service (a billing charge record) via API call |
Update | Update a Service via API call, including changing the Service name, description, tags, and barcode NoteChanging the price of a service post-creation is not supported | |
Delete | Archive/Unarchive a Service via API call | |
Import | Import a Service via API call | |
Execute | Unused at this time |
LIMS Permissions
Object Type | Permission | Description |
---|---|---|
Experiment | Create | Create an Experiment in the Projects app or via API call |
Update | Update an Experiment in the Projects app or via API call, including changing the Experiment name, description, tags, and included Entities | |
Delete | Archive/Unarchive an Experiment in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Project | Create | Create a Project in the Projects app or via API call |
Update | Update a Project in the Projects app or via API call, including changing the Project name, description, and tags | |
Delete | Archive/Unarchive a Project via API call | |
Import | Import a Project via HUB or API call | |
Execute | Unused at this time | |
Sample | Create | Create an Entity in the Projects app, Entities app, Entity Class-specific apps (Samples), or via API call |
Update | Update an Entity in the Entities app, Entity Class-specific apps (Samples), or via API call, including changing the Entity name, description, tags, barcode, and custom field data | |
Delete | Archive/Unarchive an Entity in the UI or via API call | |
Import | Import an Entity via HUB or API call | |
Execute | Unused at this time | |
Sample Sheet | Create | Create a Sample Sheet in the LIMS app or via API call |
Update | Update a Sample Sheet in the LIMS app or via API call, including changing the Sample Sheet name, description, tags, included Entities, and Sample Sheet data | |
Delete | Archive/Unarchive a Sample Sheet in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Force update | Edit data in completed LIMS Worksheets | |
Force unlock | Unlock a Sample Sheet locked by a different User | |
Workflow Chain Instance | Create | Create a Workflow Chain Instance (Experiment using a Workflow Chain) in the Projects app or via API call |
Update | Update a Workflow Chain Instance in the UI or via API call, specifically transitioning Entities to the next node(s) in the Workflow Chain | |
Delete | Archive/Unarchive a Workflow Chain Instance in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time |
Uncategorized Permissions
Object Type | Permission | Description |
---|
Object Type | Permission | Description |
---|---|---|
Notebook (only for Users with Notebook license) | Create | Create a Notebook in the Notebooks app or via API call |
Update | Update a Notebook in the Notebooks app or via API call, including changing the Notebook name, description, and tags | |
Delete | Archive/Unarchive a Notebook in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Notebook Entry | Create | Create a Notebook Entry in the Notebooks app or via API call |
Update | Update a Notebook Entry in the Notebooks app or via API call, including changing the Notebook Entry name, description, tags, and entry information (widgets with configuration) | |
Delete | Archive/Unarchive a Notebook Entry in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Code authoring | Controls whether the user can use the | |
Notebook Entry Template | Create | Create a Notebook Entry Template in the Notebooks app or via API call |
Update | Update a Notebook Entry Template in the Notebooks app or via API call, including changing the Notebook Entry Template name, description, tags, and entry information (widgets with configuration) | |
Delete | Archive/Unarchive a Notebook Entry Template in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Code authoring | Controls whether the user can use the | |
Collection | Create | Create a Collection in the HUB app or via API call |
Update | Update a Collection in the HUB app or via API call, including changing the Collection name, description, tags, and included content | |
Delete | Archive/Unarchive a Collection in the UI or via API call | |
Import | Import a Collection via HUB or API call | |
Execute | Unused at this time | |
Configuration | Create | Create a Configuration in the Config app or via API call NoteThis permission is also used to Import a Configuration via HUB or API call |
Update | Update a Configuration in the Config app or via API call, including changing the Configuration name, config values, and secrets values | |
Delete | Archive/Unarchive a Configuration in the UI or via API call | |
Import | Unused at this time | |
Execute | Unused at this time | |
Internationalization | Create | Unused at this time |
Update | Unused at this time | |
Delete | Unused at this time | |
Import | Import an Internationalization bundle via the Translations app or API call | |
Execute | Unused at this time |