R12.3-20260213

Roles and Privileges

The system provides the following pre-defined roles, and the default privileges of each role are listed as follows.

PrivilegesExplanationDomain AdminPower UserEngineerGuestNetwork Change CreatorNetwork Change ExecutorNetwork Change ApproverPortal Temp User
Domain Management

Log in to the Domain Management page and do the following domain management tasks:

  • View, export, and delete discovery report in the Data Accuracy Resolution
  • Add network definition
  • View, add, modify, delete, and disable topology links in the Topology Link Manager
  • Resolve duplicated IPs and subnets in the Duplicated IP and Subnet Manager
  • Add checkpoint OPSEC tasks in the Checkpoint OPSEC Manager
  • Configure network security settings and L2/L3 topology building options
  • Configure a desktop profile for all users under a domain
√√  √√√ 
Share Policy ManagementConfigure share policy (assign domain access and privileges to other users in this domain)√       
AI Resource Management
Access AI Bot Manager and Insight Manager
√
√


√

√

Device Management
  • Add, modify, and remove MPLS cloud
  • Remove devices from a domain
√√  √√√ 
Shared Resource and File ManagementOnly the system/tenant administrator can edit built-in files in the shared folder of Device Group, intent, GES, Qapp, Gapp, Parser, Dashboard Widget and Template, Runbook Template, and other automations.√√√ √√√ 
Site Management
  • Add MPLS clouds and unclassified network devices from the Data Accuracy Resolution to a site
  • Open the Site Manager to do site management, such as creating, editing, deleting, importing, committing, and rebuilding sites
√√  √√√ 
Auto Remediation Management
Add auto-remediation in trigged automation, preventive automation and network change
√







Discover/Tune Network Device
  • Create a do-not-scan list
  • Add discovery tasks from the Start Page or the Schedule Task page
  • Rediscover selected IPs and devices in the Data Accuracy Resolution
  • Tune live access
  • Run on-demand discoveries
√√  √√√ 
Schedule BenchmarkAdd benchmark tasks from the Start Page or the Schedule Task page√√  √√√ 
Manage Network SettingsConfigure and manage shared network settings √√  √√√ 
Manage Device Settings

Configure and manage shared device settings for each device in a domain from the following entries:

  • Site pane
  • Map
  • Data Accuracy Resolution
  • Discover
  • Tune Live Access
√√√ √√√ 
Access to Live Network

Retrieve live device data from the network, which includes:

  • Run CLI commands and Qapps on a map page or in a runbook
  • Run monitor (Qapp-based) widgets and retrieve live data in static widgets in a dashboard
  • Retrieve variables once or monitor variables periodically from the live network in Instant Qapp
  • Calculate live paths (use the live network as the data source)
  • Browse live access logs
√√√√√√√√
Create Network ChangeCreate network change tasks√√  √   
Execute Network ChangeExecute network change tasks√√   √  
Approve Network ChangeApprove network change tasks√√    √ 
View Network ChangeView network change tasks√√  √√√√
Map Layout ManagementAssociate layout styles with site maps and shared device group maps√√  √√√ 
Mandatorily Obtain Map Editing RightsUsers with this role can mandatorily have the map editing rights without asking for approval
√







Variable Mapping ManagementView and manage variable mappings√√  √√√ 
Run QappRun and schedule Qapp tasks√√√ √√√√
Golden Baseline Manual DefinitionDefine golden baseline manually√√√ √√√ 
Golden Baseline Dynamic Calculation ManagementEnable or disable dynamic calculation to set the golden baseline√√      
Manage SPOG URLView and define SPOG URL√√      
Portal ManagementManage function portals√√      
Private Resource Management

Manage private resources, including:

  • Intent
  • Qapp
  • Gapp
  • Parser
  • Data View Template
  • Runbook Template
  • Dashboard Widget and Template
  • GES
  • Other Automations
√√√ √√√ 
Primary Probe ManagementCreate, read, update, and delete Primary Probes√√      
Secondary and External Probe ManagementCreate, read, update, and delete Secondary and External Probes√√√ √√√ 
Adaptive Monitoring Polling Control

Manage Adaptive Monitoring Polling, including:

  • Adjust polling frequency
  • Configure blocking time
  • Configure polling delay
√√      
Chatbot Management
  • Create a bot
  • Share bot via URL
  • Use bot (e.g., run network intent and view execution results)
  • Manage bots (e.g., enable a bot, lock a bot)
√
Information Note: Domain Admin can do all the actions for Bot, except for editing the bot.



√





Data Accuracy Management
Open Data Accuracy Discovery and do the following:
  • Open Data Accuracy Discovery to view data accuracy alerts, system validation error and platform validation error
  • Enable Display Alert on Map option
  • Enable Resource Auto Update

√ 
√ 
√ 
√ 
√ 
√ 

Delete Network Change Delete Network Change from Runbook or the Taskbar√ √





Guidebook Management
  • Modify Target Device
  • Create a Guidebook
  • Edit a Guidebook
  • Delete a Guidebook
  • Duplicate Guidebook
√ √
√





Open Driver Management
  • Define Open Driver
  • Add a new Open Driver
  • Edit an Open Driver
  • Delete an Open Driver
√
√






Run Network Intent
Run intent from Runbook node, Auto Intent, etc.
√√√
√√√√
Triggered Diagnosis Management
  • Define triggered automation
  • Edit triggered automation
  • Delete triggered automation
  • Save As triggered automation
√






Triggered Intent Management



  • Install Triggered Intent
  • Edit Execution Tree
√√√     

Schedule CLI Command



Add Schedule CLI Commands√√√ √√√ 

Create and Run Ansible Task



Create and Execute Ansible Task node in Network Change (CM) and Runbook√√√  √  

 

Approve Registration Applications Configure Password Policy