Permission Set Definitions

Default Permission Set Definitions

Permissions are required for Predix Essentials modules to function. The following topics describe the entities to which each permission in a permission set grants the user access.

Administration


Permission	Description
Manage Users	Can add and deactivate users add and deactivate user groups create new permission sets assign users to user groups, permission sets, and assets create ingestor tokens in Setup

Alerts


Permission	Description
Alerts	Allows a user to perform the following tasks: Create Alerts Manage Alerts Manage Internal Notes View Limited Visibility Alerts View alert details for General Visibility alerts Note: To create an alert, you must have either the Alerts permission, or Manage Alerts and Limited Visibility Alerts permissions.
View Alert Detail	Allows a user to perform the following tasks: View Disposition value View Evidence View the Analysis Template Chart Navigate to Analysis View Asset faceplate View Linked Cases Note: When only View Internal Notes or Manage Internal Notes is selected, then the View Alert Detail permission is selected by default. In addition, the Manage permission always supersedes the View permission.
Manage Alerts	Allows a user to perform the following tasks: Manually create an Alert Change the Alert template Claim an Alert View all the Alert details (see View Alert Detail permissions above) Change Disposition Mark an Alert as Processed Release claim Add Evidence Create a Case from an Alert Create Case bulk action in grid Add notes in bulk edit Create reminder alerts View reminder alert criteria Note: Users with Manage Alerts cannot view, add, or delete an Internal Note.
View Internal Notes	Allows a user to perform the following tasks: View all the Alert details View Internal Notes Note: Users will not see the Internal Notes section if they do not have this permission. Users have view permissions only; they cannot perform any actions. When only View Internal Notes or Manage Internal Notes is selected, then the View Alert Detail permission is selected by default. In addition, the Manage permission always supersedes the View permission.
Manage Internal Notes	Allows a user to perform the following tasks: View all the Alert Details permissions View, add, and delete Internal Notes. Users can only delete Internal Notes that they created. Note: Admin must assign the Manage Alerts permission for a user, for that user to perform any actions on alerts. When only View Internal Notes or Manage Internal Notes is selected, then the View Alert Detail permission is selected by default. In addition, the Manage permission always supersedes the View permission.
View Limited Visibility Alerts	Allows a user to view alert details for limited visibility alerts and general visibility alerts.

Analysis


Permission	Description
Analysis View	User can: Perform ad hoc Analysis on assets to which they have access, but they cannot save the analyses that they create
Analysis Create	User can: Perform ad hoc Analysis on assets to which they have access Save analyses as Templates to support additional research

Analytics

Analytics supports granular permissions to control View and Edit access to its sub-modules/apps. This replaces the default wider permission set of Manage Analytic Catalog. Users with the View only permissions can access the sub-module/app but will not be able to make or save modifications. Users with Manage permissions to a sub-module/app can access, add, and make modifications in that sub-module/app.


Permission	Description
Manage Analytics	Access and/or modify analytic templates and orchestrations.
Manage Deployments and Filters	Access and/or modify deployments and asset filters.
Manage Analytic Configurations	Access and/or modify asset filter configuration.
View Deployments and Filters	Access deployments and asset filters.
View Analytic Configurations	Access asset filter configuration.
Blueprints	Access and/or modify blueprints (applicable to Smart Signal only).

APM Connect


Permission	Description
MI Data Loader Admin	The users have all the privileges applicable to the users having MI Data Loader User permissions. Additionally, the users can delete the data load configuration records and interface log records. To use a data loader specific to a module, the users need additional permissions specific to that module. For more information, refer to the appropriate Mappings documentation.
MI Data Loader User	The users can access to the Data Loaders feature, and can view, update, and create data load configuration records and interface log records. To use a data loader specific to a module, the users need additional permissions specific to that module. For more information, refer to the appropriate Requirements Mappings documentation.

Asset

Important: In Predix Essentials, assign only the View Assets permission to users to keep the data synchronized in the Predix Essentials databases.

Note: If user has access to all resources (such as an administrator), all asset restriction policies are ignored.


Permission	Description
Ingest Assets api	None
View Assets api	None
Edit Assets api	None
Ingest Assets	User can create and edit the asset model for the tenant. User can also view related ingestion logs. Important: In Predix Essentials, users with Ingest Assets permission can edit asset-related data using the Predix Essentials UI. However, the users must not edit asset data other than the groups, templates, tags, geolocation, and classifications to avoid asset data in the Predix Essentials databases to become out of sync.
View Assets	User can view all data related to assets, including Asset Instances and Classifications.
Edit Assets	User can modify all editable asset data via the user interface. This permission includes: view asset and allows deletion of asset instance.

Asset Health


Permission	Description
MI Health Power	Users can create, update, and delete policies, policy instances, policy recommendations, and health indicator values. Users can access the eLog module. If they are assigned to a Shift, they can also create log entries.
MI Health Admin	Users can access the eLog Administrator pages to create Shifts, Templates, and assign Teams to Shifts.
MI Health User	User can: Access the Rounds Data Collection mobile features. Create recommendations and acknowledge heath indicators in Asset Health Manager. View policy data. Create policy instances in Policy Designer. Create and modify AMS Asset recommendations. Access the eLog module. If they are assigned to a Shift, they can also create log entries and manage assignments.
MI Rounds-Pro Admin	Users can access Rounds Pro Manager and perform all the related tasks.
MI Rounds-Pro User	Users can access Rounds Pro Mobile application and perform all the related tasks.

Asset Strategy


Permission	Description
MI Strategy Power	The users have all the privileges applicable to the users having MI Strategy User permission, and the administrative privileges for the Asset Health Manager feature.
MI Strategy Admin	The users have all the privileges applicable to the users having MI Strategy Power permissions. Additionally, the users have administrative privileges for the Reliability Centered Maintenance, Failure Modes and Effects Analysis, Asset Strategy Implementation, and Life Cycle Cost Analysis features.
MI Strategy User	The users have the view, create, update, and delete privileges for the Reliability Centered Maintenance, Failure Modes and Effect Analysis, Asset Strategy Implementation, Asset Strategy Management, and Life Cycle Cost Analysis features. Additionally, the users have the administrative privileges for Rounds feature, and view privileges for Asset Health Manager and Calibration Management features.

Audit Logs


Permission	Description
User Management Audit Log	Tenant admin can view details about changes to Administration items

BI


Permission	Description
OData Extract-Cases	Allows a user to extract Cases data.
OData Extract-Alerts	Allows a user to extract Alerts data.

Cases


Permission	Description
Cases	Allows a user to perform the following tasks: View a case Claim a case Create a case Change the status of a case Update the report Add evidence and notes Create a case from an alert Note: To create a case, you must have the Cases and View Limited Visibility Cases permissions.
View Case Detail	Allows a user to perform the following tasks: View Case Details View Actions section View Evidence section View Interpretation section View Closure section, if available View any custom sections Access only the Export to PDF option. View the Notes section, add notes or delete notes created by the user. Users cannot perform the following tasks: Claim a case Change the case status Create a case Mark any similar case as reference or remove a related case from the Similar Cases section Modify the information in the Evidence, Actions, Case Info, Interpretation, or Closure sections
Edit Case Detail	Allows a user to view or edit a case. However, the user cannot create a case from an alert or create a case in Cases. Therefore, when a user with this permission claims an alert, the user will not see the Create Case button.
View Limited Visibility Cases	Allows a user to view case details of the limited visibility cases and general visibility cases.

Cost Benefit Analysis


Permission	Description
Configure Asset Type	Allows the user to perform the following tasks during tenant onboarding: Create metadata related to tenant Modify metadata related to tenant Delete metadata related to tenant
Cost Benefit Analysis	Allows the user to perform the following tasks: Create a Cost Benefit Analysis for a case Modify the Cost Benefit Analysis for a case Access the CBA Dashboard module

Cross Tenancy


Permission	Description
Cross Tenancy	Admin user can see the cross tenancy sharing tab.

Dashboard


Permission	Description
Dashboard-Update	User can update an existing dashboard. This permission is required to create dashboards as well.
Dashboard-Create	User can create a new dashboard and save it.
Class-Dashboard	User can create a class level dashboard.
Dashboard-View	User can view existing dashboards and create a private dashboard.
Default-Dashboard-Instance	User can set an instance level default dashboard.
Default-Dashboard-Class	User can set a class level default dashboard.

eLog


Permission	Description
MI eLog Viewer	Users can access the eLog module. If they are assigned to a Shift, they can also create log entries.
MI eLog Administrator	Users can access the eLog Administrator pages to create Shifts, Templates, and assign Teams to Shifts.
MI eLog Contributor	Users can access the eLog module. If they are assigned to a Shift, they can also create log entries and manage assignments.

Failure Elimination


Permission	Description
MI FE PowerUser	The users have all the privileges applicable to the users having MI FE User permission. Additionally, the users can: Create, update, and delete Root Cause Analyses, Production Plans, Production Events, Production Losses, Production Analyses, System Reliability Analyses, Spares Analyses, Reliability Distribution Analyses, Probability Distribution Analyses, Reliability Growth Analyses, and Automation Rules. Update Production Data and link Production Events to Root Cause Analyses. Create and update GAA Events and GAA Performance records.
MI FE Administrator	The users have all the privileges applicable to the users having MI FE PowerUser permissions. Additionally, the users have administrative privileges for the Generation Availability Analysis, Root Cause Analysis, Production Loss Analysis, and Reliability Analytics features.
MI Analytics Power	The users can: View, create, update, and delete cognitions. View cognition-related logs and standard lists.
MI FE User	The users can access the GAA Company, GAA Plants, GAA Units, GAA Events, GAA Performance records, Root Cause Analyses, Production Loss Analyses, Production Analyses, System Reliability Analyses, Spares Analyses, Reliability Distribution Analyses, Probability Distribution Analyses, Reliability Growth Analyses, and Automation Rules features.
MI Analytics Administrator	The users can view, create, update, and delete cognitions, cognition-related logs, and standard lists.

Foundation

Important: If the Foundation permission set is available in a tenant, you must assign at least one permission from this set to all the users of the tenant. We recommend that the users are assigned the MI APM Viewer permission or APM Basic User Permission set for the assets they need to access.


Permission	Description
MI Foundation Power	The users have all the privileges applicable to the users having MI Foundation User permissions. Additionally, the users can: Save data from the devices in the Predix Essentials database. Create and manage the Site Reference records. Update, add, and delete the ACA records. View the SAP System records. Add the users to the states. Remove the users from the states.
MI APM Viewer	The users can view most of the Predix Essentials records.
MI APMNow Admin	The users can access Tools and certain administrative features.
MI Foundation User	The users can: Send and receive data from the devices. Create and manage the recommendations. Create and update the tasks. View and create the ACA records. View the KPIs, Scorecards, and Metric Views. View the SAP System records.
Administrator (Super User)	The users can access all the administrative applications and Predix Essentials features and functionalities.
MI Foundation Admin	The users have all the privileges applicable to the users having MI Foundation Power permissions. Additionally, the users can configure mappings for the devices and view the SAP System records. In addition, the users have administrative privileges for the Catalog, Tasks, and ACA records features.

Generation Availability Analysis


Permission	Description
MI GAA Viewer	Users have view privileges in the following families: Amplification Codes APM Event Capacity Incident Cause Codes Contributing Event GAA Code Mapping GAA Company GAA??Configuration GAA Event Categories GAA Event Transition GAA Event Types GAA Fuel Types GAA Performance GAA Performance Fuel GAA Performance Indexes GAA Performance Summary GAA Plant GAA??Report Details GAA Supported Organizations GAA Unit GAA??Unit Capacity GAA??Unit Types GAA Unit States Generation Pool Primary Event Primary Event Details Primary Event History RCA??Analysis Reference Document Associated with APM Event Functional Location Has Generation Company Functional Location Has Generation Plant Functional Location Has Generation Unit Has Capacity History Has Incident Has Plant Has Reference Documents Has Unit Log has Events Primary Incident Has RCA Analysis Unit Has Records
MI GAA Administrator	Users have view, update, insert, and delete privileges in the following families that support GAA Reporting: Amplification Codes APM Event Capacity Incident Cause Codes Contributing Event GAA Code Mapping GAA Company GAA??Configuration GAA Event Categories GAA Event Transition GAA Event Types GAA Fuel Types GAA Performance GAA Performance Fuel GAA Performance Indexes GAA Performance Summary GAA Plant GAA??Report Details GAA Supported Organizations GAA Unit GAA??Unit Capacity GAA??Unit Types GAA Unit States Generation Pool Primary Event Primary Event Details Primary Event History Reference Document Associated with APM Event Functional Location Has Generation Company Functional Location Has Generation Plant Functional Location Has Generation Unit Has Capacity History Has Incident Has Plant Has Reference Documents Has Unit Log has Events Primary Incident Has RCA Analysis Unit Has Records Note: RCA Analysis has only view privilege.
MI GAA Analyst	Users have view, update, and insert privileges in the following families that support GAA Reporting: Amplification Codes APM Event Capacity Incident Contributing Event GAA Event Types GAA Fuel Types GAA Performance GAA Performance Fuel GAA Performance Indexes GAA Performance Summary GAA??Report Details Primary Event Primary Event Details Primary Event History Reference Document Associated with APM Event Has Capacity History Has Incident Has Reference Documents Log has Events Primary Incident Has RCA Analysis
MI GAA Analyst	Users have view privileges in the following families that support GAA Reporting: Cause Codes GAA Code Mapping GAA Company GAA Configuration GAA Event Categories GAA Event Transition GAA Plant GAA Supported Organizations GAA Unit GAA??Unit Capacity GAA??Unit Types GAA Unit States Generation Pool RCA Analysis Functional Location Has Generation Company Functional Location Has Generation Plant Functional Location Has Generation Unit Has Plant Has Unit Unit Has Records

Generation Availability Analysis Wind


Permission	Description
MI GAA Wind Operator	Users have view privileges in the following families: GAA Company GAA Wind Event GAA Wind Group GAA Wind IEC And NERC Mapping GAA Wind IEC Types GAA Wind Import Details GAA Wind NERC Types GAA Wind Performance GAA Wind Plant GAA Wind Report Configuration GAA Wind Report Details GAA Wind Sub Group GAA Wind Sub Group Capacity GAA Wind Unit Functional Location Has GAA Wind Group Functional Location Has GAA Wind Plant Functional Location Has GAA Wind Sub Group Functional Location Has Generation Company GAA Wind Company Has Plant GAA Wind Group Has Sub Group GAA Wind Plant Has Group GAA Wind Sub Group Has Configuration GAA Wind Sub Group Has Unit GAA Wind Unit Has Equipment GAA Wind Unit Has Events
MI GAA Wind Super Administrator	Users have view, insert, update, and delete privileges in the following families that support GAA Wind Reporting: GAA Company GAA Wind Event GAA Wind Group GAA Wind IEC And NERC Mapping GAA Wind IEC Types GAA Wind Import Details GAA Wind NERC Types GAA Wind Performance GAA Wind Plant GAA Wind Report Configuration GAA Wind Report Details GAA Wind Sub Group GAA Wind Sub Group Capacity GAA Wind Unit Functional Location Has GAA Wind Group Functional Location Has GAA Wind Plant Functional Location Has GAA Wind Sub Group Functional Location Has Generation Company GAA Wind Company Has Plant GAA Wind Group Has Sub Group GAA Wind Plant Has Group GAA Wind Sub Group Has Configuration GAA Wind Sub Group Has Unit GAA Wind Unit Has Equipment GAA Wind Unit Has Events
MI GAA Wind Administrator	Users have view, insert, update, and delete privileges in the following families that support GAA Wind Reporting: GAA Wind Import Details GAA Company GAA Wind Event GAA Wind Group GAA Wind Performance GAA Wind Plant GAA Wind Report Configuration GAA Wind Report Details GAA Wind Sub Group GAA Wind Sub Group Capacity GAA Wind Unit Functional Location Has GAA Wind Group Functional Location Has GAA Wind Plant Functional Location Has GAA Wind Sub Group Functional Location Has Generation Company GAA Wind Company Has Plant GAA Wind Group Has Sub Group GAA Wind Plant Has Group GAA Wind Sub Group Has Configuration GAA Wind Sub Group Has Unit GAA Wind Unit Has Equipment GAA Wind Unit Has Events The users have view privileges in the following families: GAA Wind IEC And NERC Mapping GAA Wind IEC Types GAA Wind NERC Types
MI GAA Wind Analyst	Users have view privileges in the following families that support GAA Wind Reporting: GAA Wind NERC Types GAA Wind Performance GAA Wind Plant GAA Wind Report Configuration GAA Wind Report Details GAA Wind Sub Group GAA Wind Sub Group Capacity GAA Wind Unit Functional Location Has GAA Wind Group Functional Location Has GAA Wind Plant Functional Location Has GAA Wind Sub Group Functional Location Has Generation Company GAA Wind Company Has Plant GAA Wind Group Has Sub Group GAA Wind Plant Has Group GAA Wind Sub Group Has Configuration GAA Wind Sub Group Has Unit GAA Wind Unit Has Equipment GAA Company GAA Wind Group GAA Wind IEC And NERC Mapping GAA Wind IEC Types The users have view, insert, update, and delete privileges in the following families: GAA Wind Event GAA Wind Import Details GAA Wind Unit Has Events

Knowledge Management


Permission	Description
Knowledge Management	User can search the Knowledge Management System.

KPI Management


Permission	Description
Search Knowledge Management System	Allows user to search the knowledge management system.

Life Cycle Cost Analysis


Permission	Description
MI LCC Administrator	Users have administrative privileges for Life Cycle Cost Analysis.
MI LCC User	Users have user privileges for Life Cycle Cost Analysis.
MI LCC Viewer	Users have view privileges for Life Cycle Cost Analysis.

Mechanical Integrity


Permission	Description
MI Mechanical Integrity Power	The users have all the privileges applicable to the users having MI Mechanical Integrity User permissions. Additionally, the users can access the criticality calculator family and RBI features (except data mapping). The users have the view privileges for all the RBI families.
MI Mechanical Integrity Administrator	The users have all the privileges applicable to the users having MI Mechanical Integrity Power permissions. Additionally, the users have the administrative privileges for the Thickness Monitoring and RBI features and can access the RBI data mapping and reference tables.
MI Mechanical Integrity User	The users can access the T-Min Calculator, Archive Corrosion Rates, Exclude TMLs, and Renew TMLs features. Additionally, the users have basic access to the Inspection and Thickness Monitoring features.
SC Recommendation Management Implementer	The users can change the status of the Recommendations from the Approved or In Progress state to the Completed state.
SC Recommendation Management Reviewer	The users can change the status of the Recommendations from the Pending Approval state to one of the following states: Pending Review Approved Canceled Rejected

Policy Designer


Permission	Description
MI Policy Administrator	Users can modify application settings for Policy Designer and Family Policies. Users can create, update, and delete policies, policy instances, policy recommendations, and health indicator values. Users can view policy execution results.
MI Policy Designer	Users can create, update, and delete policies, policy instances, policy recommendations, and health indicator values. Users can view policy execution results.
MI Policy User	Users can create, update, and delete policy instances, policy recommendations, and health indicator values. Users can view policies and policy execution results.
MI Policy Viewer	Users can view policies, policy instances, and policy execution results.

Predix Workorder Management


Permission	Description
Predix Workorder Management Note: This permission is only for Predix Essentials, not Predix Essentials users.	Users must be assigned this permission to perform the following activities: Create Recommendations from Alerts and Cases View list of recommendations in Alert and Case Details pages View Work Orders in Alert and Case Details pages View Criticality number in Alert and Case Details pages and Asset dashboard View open work orders, completed work orders, and recommendations data in an asset dashboard.

Production Loss Analysis


Permission	Description
Production Loss Accounting User	Users can update Production Plans, Production Data, and Production Events.
Production Loss Accounting Viewer	Users have view privileges for Product Loss Analysis and can view Production Plans, Production Data, and Production Events. However, the users cannot update the Production Plans, Production Data, or Production Events.
Production Loss Accounting Service	Users can perform the following operations: Access Production Plans. Enter Production Data. Reconcile Production Losses. Create Production Events. However, users cannot create Production Plans.
Production Loss Accounting Administrator	Users have administrative privileges for Production Loss Analysis and can perform the following operations: Access the PLA Administrator page. Create Plan Templates, Production Units, Production Profiles, and Products. Update Production Data.

Reliability Analytics


Permission	Description
MI Reliability Administrator	Users have administrative privileges for Reliability Analytics workflows.
MI Reliability Analyst	Users have user privileges for Reliability Analytics.
MI Reliability Viewer	Users have view privileges for Reliability Analytics.

Root Cause Analysis


Permission	Description
MI PROACT Administrator	Users have administrative privileges for Root Cause Analysis.
MI PROACT Team Member	Users have user privileges for Root Cause Analysis.
MI PROACT Viewer	Users have view privileges for Root Cause Analysis.

Rounds


Permission	Description
MI Operator Rounds Administrator	Users can access the Data Collection, Rounds Designer, and Rounds Mobile applications and perform all administrative tasks.
MI Operator Rounds Mobile User	Users can access the Rounds Mobile application and perform all the related tasks.

Safety


Permission	Description
MI Safety Power	The user can access the following records: Initiating Event Consequence Adjustment Probabilities IPL Checklist Active IPL Passive IPL Human IPL Asset Safety Preferences Additionally, the users have all the privileges applicable to the users having MI Safety User permissions, and have the ability to create, modify, and delete all other records in Calibration Management, Hazards Analysis, LOPA, and SIS Management.
MI Safety Admin	The users have all the privileges applicable to the users having MI Safety Power permission. Additionally, the users can create, modify, and delete all the records in Calibration Management, Hazards Analysis, LOPA, MOC, and SIS Management.
MI Safety User	The users can access the Recommendations, Calibration Templates, Risk Threshold records, Protective Instrument Loops, SIL Assessments, and SIL Threshold records features. Additionally, the users can access, create, modify, and delete all other records in Calibration Management, Hazards Analysis, LOPA, MOC, and SIS Management. In MOC, the users can access, create, modify, and delete General Recommendations.

Setup


Permission	Description
Setup	Included with Manage Users from Administration Available to User Admins to create and view ingestor URLs, username and passwords. Provides the ability to reset ingestion password.

SmartSignal

Note: By default, Predix Essentials does not give users access to the SmartSignal microapps. An administrator must provide each user with permissions to access the SmartSignal applications, as well as modify the permissions for the ingestor user (used to upload assets into Predix Essentials).


Permission	Description
SmartSignal Evidence	Can view SmartSignal Alerts and charting data for Analysis.
SmartSignal Host and Tenant	Setup SmartSignal Hosts and Tenants User can configure SmartSignal hosts. User can configure SmartSignal tenant mappings.
SmartSignal Mapping	Setup SmartSignal Analytic ??? Can perform SmartSignal asset mapping. Setup SmartSignal Maintenance
For Predix APM native client configurations, users must have the following permissions:
SmartSignal Evidence	Setup SmartSignal Evidence
SmartSignal Mapping	Setup SmartSignal Analytic
For Predix Essentials configurations, users must have the following permissions:
Analytics	Manage Analytics catalog
SmartSignal Evidence	Setup SmartSignal Evidence
SmartSignal Mapping	Setup SmartSignal Analytic

Stuf


Permission	Description
Basic group info	Can set up and edit basic group information.

Templates


Permission	Description
Alert Templates	Can create Alert Templates.
Cases Templates	Can create Case Templates.

Timeseries


Permission	Description
View Data Sources for Timeseries	Can view data sources for Timeseries.
Add Timeseries	Can ingest and update Timeseries data.
View Timeseries	Can view Timeseries data.
Configure Data Sources for Timeseries	Can configure data sources for Timeseries.

Units of Measure


Permission	Description
ViewUoM	User can view the Units of Measure Conversion page.
EditUoM	User can edit the Units of Measure Conversion page.