You are here: Web User Interface > Using the Interface > Security > Roles

Roles

Select Security > Roles.

A role is a group of one or more Users.

For more information about users and roles in FME Server, see Role-Based and User-Based Access Control.

The default columns displayed in the Roles table are:

  • Name - Name of the role.
  • Users - User accounts assigned to the role.

FME Server provides a set of default roles:

ClosedClick to view default roles
Role Description User

fmeadmin

Provides full access to FME Server, including the Web User Interface.

 "administrator" (username specified during installation)

fmeauthor

Provides workspace authors access to FME Server to publish, author, and test new workspaces.

 author

fmeguest

Provides unauthenticated access to run jobs via Web Service URLs.

 guest
fmesuperuser Authorized to access all resources of FME Server, including existing and newly-created resources. "administrator"
fmeuser Provides users access to the Web User Interface and Web Services. user

Adding and Removing Roles

To add a role, click New. Alternatively, select an existing role and click Duplicate. A dialog displays to add a new role. This dialog is similar to Configuring an Existing Role, below.

To remove a role, select it and click Remove.

Configuring an Existing Role

To configure an existing user role, click an entry in the Roles table. The Edit Role page opens. Configure the following settings, and click OK to save your changes.

Associated Users

To assign users to the role, click inside the field and select a user in the drop-down. To remove users from the role, click the "x" beside the user name.

Permissions

You can give a role access to different functions in FME Server. Check the box beside a function to grant access.

There are two levels of permissions:

  • General: Allows users of the role to view the corresponding navigation link in the Web User Interface, along with select management functions, depending on the category. For example, if Access is checked beside Repositories, users can access the Repositories page. Additionally, if Create is checked, users can create repositories on the Repositories page.
  • Item: Allows users of the role specific permissions on items within functional categories. To view items, click the drop-down icon of a category (v). For example, when you expand the Repositories category, you see the individual repositories on your FME Server, along with the permissions that can be granted for each one.

The following is a detailed explanation of general- and item-level (where applicable) permissions for each category:

ClosedRun Workspace
ClosedJobs
  • Access: Access the Jobs page to view the jobs you have run, or cancel any of your jobs that are currently running or in queue.
  • Manage: Access and manage the jobs of all users. You can:
    • Cancel any job that is currently running.
    • Remove the history of jobs that were previously run.
    • Manage Job Queues. (Also requires Manage permission in Engines & Licensing.)
ClosedWorkspace Viewer
ClosedSchedules
  • Access: Access the Schedules page.
  • Create: Create schedules.

    • Individual Schedules:

    • Allow: Edit or delete a schedule.
ClosedRepositories
  • Access: Access the Repositories page.

    • Note: Access permission is not required to run a workspace. Only Run permission on the applicable repository is required (see below).

  • Create: Create repositories.

    • Individual Repositories:

    • Download: Download workspaces and other repository items from FME Server into Workbench.
    • Read: View repository information.
    • Publish: Publish workspaces and other items to the repository from Workbench.
    • Run: Run repository workspaces from FME Server.

      • Note: Users must also have Allow permission on the applicable service (see Services) when running workspaces.

    • Remove: Remove a repository, or remove items from a repository.

    Note: You must uncheck all five permissions to completely remove a role from membership with a repository.

ClosedPublications
  • Access: Access the Publications page.
  • Create: Create Notification Service Publications.

    • Individual Publications:

    • Read: View information about a publication.
    • Write: Edit a publication.
    • Remove: Delete a publication.
ClosedSubscriptions
  • Access: Access the Subscriptions page.
  • Create: Create Notification Service Subscriptions.

    • Individual Subscriptions:

    • Read: View information about a subscription.
    • Write: Edit a subscription.
    • Remove: Delete a subscription.
ClosedTopics
  • Access: Access the Topics page.
  • Create: Create topics.

    • Individual Topics:

    • Read: View information about a topic.
    • Write: Edit a topic.
    • Publish: Publish notifications to a topic.
    • Remove: Delete a topic.
ClosedResources
  • Access: Access the Resources page.
  • Create: Create connections to network resources.

    • Individual Resource connections (top-level folders):

    • Access: Read and download a file.
    • List: List the folders and files of a resource.
    • Write: Write to files.
    • Upload: Upload files.
    • Remove: Delete files.
ClosedConnections
  • Access: Access the Database Connections and Web Connections pages.
  • Create: Create connections.
  • Manage: Manage connections.

    • Individual Connections:

    • Allow: Manage web services.
ClosedProjects
  • Access: Access the Projects page.
  • Create: Create projects.

    • Individual Projects:

    • Read: View information about a project.
    • Write: Edit a project.
    • Delete: Delete a project, or delete items from a project.

    Note: Access or Create permission is not required to have Read/Write/Delete permission on individual projects. These tasks can still be accomplished with the REST API.

ClosedDashboards
ClosedEngines & Licensing
ClosedSecurity
ClosedSystem Cleanup
ClosedServices
  • Manage: Configure the FME Server services.
ClosedVersion Control

Note: Version Control must be enabled to view these permissions.