# User profiles

OpenGate by default incorporates a set of user profiles which is listed below:

New *adhoc* user profiles can be added to adapt to specific needs.

## Profiles
  
- `root`
- `super_admin_domain`
- `admin_domain`
- `admin`
- `advanced`
- `viewer`

## `root`

Total control for managing all resources in the platform

## `super_admin_domain`

### `super_admin_domain` access to the Provision API

- Domains (create, update, delete)
- Subdomains (create and update)
- Organizations (create, update, delete)
- Work groups (create, update, delete)
- Channels (create, update, delete)
- Users (create, update, delete)
- Certificates (create, update, delete, download)
- Data models (create, update, delete)
- Areas (create, read, update, delete)
- Bulk of Assets, Devices, subscriptions (create, update, delete)
- Assets entities (create, read, update, delete)
- Devices entities (create, read, update, delete)
- Subscriptions entities (create, read, update, delete)
- Subscribers entities (create, read, update, delete)
- APNs (create)
- Radius Clients (create)
- Tags (create)
- Tickets (create, read, update, delete)
- Manufacturers (create, read, update, delete)
- Models (create, read, update, delete)
- Datasets (create, read, update, delete)
- Provision processors (create, read, update, delete)
- Timeseries (create, read, update, delete)
- Artificial Intelligence (create, read, update, delete)

### `super_admin_domain` access to the Search API

Full access.

### `super_admin_domain` access to the Operation API

- Jobs (create, read, update, delete)
- Tasks (create, read, update, delete)
- Alarms (read, attend, close)
- Rules (read, update, clone, delete)
- Bundles (create, read, update, delete, execute)
- Download csv

## `admin_domain`

### `admin_domain` access to the Provision API

- Domains (create, update, delete)
- Subdomains (create and update)
- Organizations (create, update, delete)
- Work groups (create, update, delete)
- Channels (create, update, delete)
- Users (create, update, delete)
- Certificates (create, update, delete, download)
- Data models (create, update, delete)
- Areas (create, read, update, delete)
- Bulk of Assets, Devices, subscriptions (create, update, delete)
- Assets entities (create, read, update, delete)
- Devices entities (create, read, update, delete)
- Subscriptions entities (create, read, update, delete)
- Subscribers entities (create, read, update, delete)
- APNs (create)
- Radius Clients (create)
- Tags (create)
- Tickets (create, read, update, delete)
- Artificial Intelligence (read)

### `admin_domain` access to the Search API

Full access.

### `admin_domain` access to the Operation API

- Jobs (create, read, update, delete)
- Tasks (create, read, update, delete)
- Alarms (read, attend, close)
- Rules (read, update, clone, delete)
- Bundles (create, read, update, delete, execute)
- Download csv

## `admin`

### `admin` access to the Provision API

- Work groups (create, update, delete)
- Channels (create, update, delete)
- Users (create, update, delete)
- Certificates (create, update, delete, download)
- Data models (create, update, delete)
- Areas (create, read, update, delete)
- Bulk of Assets, Devices, subscriptions (create, update, delete)
- Assets entities (create, read, update, delete)
- Devices entities (create, read, update, delete)
- Subscriptions entities (create, read, update, delete)
- Subscribers entities (create, read, update, delete)
- APNs (create)
- Radius Clients (create)
- Tags (create)
- Tickets (create, read, update, delete)
- Artificial Intelligence (read)

### `admin` access to the Search APIs

Full access.

### `admin` access to the Operation API

- Jobs (create, read, update, delete)
- Tasks (create, read, update, delete)
- Alarms (read, attend, close)
- Rules (read, update, clone, delete)
- Bundles (create, read, update, delete, execute)
- Download csv

## `advanced`

### `advanced` access to the Provision API

- Users (update yourself)
- Certificates (download)
- Areas (create, read, update, delete)
- Bulk of Assets, Devices, subscriptions (create, update, delete)
- Assets entities (create, read, update, delete)
- Devices entities (create, read, update, delete)
- Subscriptions entities (create, read, update, delete)
- Subscribers entities (create, read, update, delete)
- Tags (create)
- Tickets (create, read, update, delete)
- Artificial Intelligence (read)

### `advanced` access to the Search API

Full access.

### `advanced` access to the Operation API

- Jobs (create, read, update, delete)
- Tasks (create, read, update, delete)
- Alarms (read, attend, close)
- Rules (read, update, clone, delete)
- Bundles (create, read, update, delete, execute)
- Download csv

## `viewer`

### `viewer` access to the Provision API

- Users (update yourself)
- Certificates (download)
- Areas (read)
- Assets entities (read)
- Devices entities (read)
- Subscriptions entities (read)
- Subscribers entities (read)
- Tickets (read)
- Artificial Intelligence (read)

### `viewer` access to the Search API

Full access.

### `viewer` access to the Operation API

- Jobs (read)
- Tasks (read)
- Alarms (read)
- Rules (read)
- Bundles (read)
- Download csv