User Roles and Permissions Overview

Users Roles and Permissions Overview

In the ProFile system, a user represents a single individual who accesses the system. Users are assigned roles, which are a collection of permissions that allow for different types of access to the system.

Roles and permissions features are only accessible by OEMs and Plant Managers.

Definitions:

• User - Represents a singular individual within the ProFile system. The user's access to the ProFile system is defined by their role/roles.
• Role - A collection of permissions assigned to users granting them authorization to access or utilize different parts of the ProFile system.
• Permission - A specific authorization to access or use specific functionalities or sets of information within the ProFile system.

Quick Links:

Users

Roles and Permissions

Default Roles

ProFile System Administrator Default Permissions

Enterprise Administrator Default Permissions

Machine Operator Default Permissions

Process Technician Default Permissions

Molding Floor Supervisor Default Permissions

Technician Default Permissions

Quality Default Permissions

Plant Manager Default Permissions

Asset Administrator Default Permissions

Permission Charts

Users

A user represents an individual who accesses the system and has an associated collection of data such as an email address, a name, an avatar, and a default language setting. Users can also be assigned roles, which are a collection of permissions, and will also be assigned to specific clients. All of this is managed through the Administration tab by either Administrative Users or Plant Managers, two examples of roles that can be assigned to a user. 

To get further instruction on how to manage users read the related Managing Users article.

Roles and Permissions

Roles such as Administrator, Plant Manager, Technician, etc. are assigned to users. Users can be assigned multiple roles and each role grants that useradditional access and privileges within the ProFile system, known as permissions. These Permissions and how they relate to the roles can be fully customized. 

For more information on how to customize the permissions within roles read the related Managing Roles article.

Granular Permissions

All of the granular permissions that are in the ProFile system are grouped into different categories that correspond to different aspects of ProFile and are used to define the different roles. Following is a list of all of the permission categories and the individual permissions within each grouping.

Permissions:

System Administration

• ProFile System Administrator - Grants all permissions throughout the client hierarchy
• View Client Stats - Allows view of summarized information about the clients using the system
• Manage Connectivity - Allows creation, reading, updating, and deletion of gateways, modules, and monitors

Client Hierarchy Management

• List Clients - Ability to obtain a list of clients, or view detail of a single client
• Create Client - Ability to create a new client (includes bulk upload)
• Modify Client - Ability to update client information (does not include managing client connectivity)
• Delete Client - Ability to delete clients
• List Enterprise - Ability to obtain a list of enterprises associated with the related client as well as the details of a single enterprise
• Create Enterprise - Ability to create a new enterprise associated with a client
• Modify Enterprise - Ability to update information associated with an enterprise
• Delete Enterprise - Ability to delete an enterprise
• List Plants - Ability to obtain a list of plants associated with a client or enterprise
• Create Plants - Ability to create a new plant associated with an enterprise (includes bulk upload)
• Modify Plant - Ability to update core attributes of a plant (does not include all attributes)
• Manage Plant Expiration - Ability to change the field containing the plant's expiration date or the state of the plant. 
• Delete Plant - Ability to delete a plant
• Manage Roles - Ability to create, read, update, and delete roles associated with a client (roles have specific permissions by default - customizing these roles does not change the system defaults)
• Manage Users - Ability to create, read, update, and delete users associated with a client

Plant Management

• Manage Master Data - Ability to create, read, update, and delete various parts of the data model for the client hierarchy (Master Data includes: shifts, schedules, plant locations, reject reasons, reject dispositions, cavitation, reasons, spare parts, downtime classes and reasons, work order categories, and work types)
• Manage Operators - Ability to create, read, update, and delete operators (operators are a specific category of users)
• Manage Asset Definitions - Ability to create, read, update, and delete the asset class/type hierarchy (does not include specific instances of assets)
• View "Plant Specific" or "Analytics" dashboards - Ability to view Plant Specific or Analytics dashboards (specific widgets may show or be hidden depending on other permissions)

Preventative Maintenance Checklists

• Manage Preventative Maintenance Checklist Templates - Ability to create, read, update, and delete preventative maintenance checklist templates (does not include preventative maintenance checklist instances)
• Create Preventative Maintenance Checklist Instance - Ability to create new preventative maintenance checklist from a template or from an existing PM Checklist
• Update Existing PM Checklist Instance Details - Ability to edit existing PM checklists, but NOT the ability to move them through the state model
• Complete PM Checklist Instance - Ability to mark a PM checklist as complete
• Delete PM Checklist Instance - Ability to delete a PM checklist
• List PM Checklist Instances - Ability to view the list the details of all PM checklists or a single PM checklist
• List PM Checklist Instance Documents - Ability to view the list of documents in the PM checklist filing cabinet
• Upload PM Checklist Instance Documents - Ability to upload a document to a PM checklist filing cabinet
• Delete PM Checklist Instance Documents - Ability to delete documents from a PM checklist filing cabinet

Work Orders

• List Work Orders - Ability to view a list of work orders and their details
• Create Work Order - Ability to create a new work order
• Mark Work Order Ready for Work - Ability to prioritize work orders and change their state to "Ready for Work"
• Work on Work Order - Ability to update work order details and change the state to "In Work"
• Grant Foreman Approval - Ability to update work order details and change the state of the work order to "Foreman Approval"
• Grant QC Approval - Ability to update work order details and change their state
• List Work Order Documents - Ability to list the documents in the work order's filing cabinet (includes reading, opening, or downloading the visible documents)
• Upload Work Order Documents - Ability upload a document to a work order's filing cabinet
• Edit Work Order - Ability to update the work order details (applies to the work order category, priority, work required, and due date fields)
• Delete Work Orders - Ability to delete work orders

Asset Management

• List Assets - Ability to view list of assets, their details, and download asset data (includes bulk download)
• Create Assets - Ability to create a new asset from an asset definition (includes bulk upload)
• Update Asset - Ability to update the details of an asset and change their parent definition. Also grants the ability to change nested assets that are children of an asset. (includes bulk upload)
• Delete Asset - Ability to delete an asset
• Change Asset Location - Ability to change asset location data independent of the rest of the asset's configuration
• List Asset Documents - Ability to list the documents in the asset filing cabinet (includes reading opening, or, downloading the visible documents)
• Upload Asset Documents - Ability to upload a document to the asset file cabinet (includes both create and update actions)
• Delete Asset Documents - Ability to delete a document from an asset filing cabinet
• View Asset Reports - Ability to view asset-specific reports, including activity, cycle, time, cavitation, parts per hour, etc.
• View Alerts - Ability to view alerts
• Acknowledge Alerts - Ability to acknowledge alerts against an asset
• Enter Operational Data - Ability to create operational data (operational data includes downtime, rejects, cavitation, and parts consumed)
• Manage Operational Data - Ability to manage operational data including creation, listing, updating, and deleting
• View Operational Data - Ability to view operational data

Production Orders

• Create Production Orders - Ability to create production orders for dashboarding purposes
• View Production Orders - Ability view a list of production orders or the details of a single production order
• Edit Production Order - Ability to edit production orders and move them through the state model
• Delete Production Order - Ability to remove a production order (hard-delete)

Default Roles

By default the inherent roles that exist in ProFile have specific permissions already assigned. However, these roles can be managed and customized with different permissions. Changing the roles will NOT overwrite the systems defaults. Here is a list of the default roles and their default set of permissions.

Enterprise Administrator

Highest level of Client user. They are responsible for looking after tools globally at the summary level. They are interested in variances across a plant, and if something is not meeting quality standards. They look at metrics for OEE for entire plants. They run specific programs and looks at summary dashboards. They are responsible for capacity planning at the tool level. Their biggest barrier is that the molder does not want to share production details with the OEM.

• Client Hierarchy Permissions
  • List Clients
  • List Enterprise
  • List Plants
  • Modify Plants
  • Manage Roles
  • Manage Users
• Plant Management
  • Manage Operators
  • Manage Master Data
  • View "Plant Specific" or "Analytics" Dashboard
  • Manage Asset Definitions
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Delete Work Order Documents
  • Update Work Orders
  • Mark Work Order Ready For Wok
  • Work on Work Order
  • Grant Forman Approval
  • Grant QC Approval
  • List Work Order Documents
  • Upload Work Order Documents
• Asset Management
  • List Assets
  • Update Asset
  • Change Asset Location
  • List Asset Documents
  • Upload Asset Documents
  • Delete Asset Documents
  • View Asset Reports
  • View Asset Reports
  • View Alerts
  • Acknowledge Alerts
  • Enter Operational Data
  • Manage Operational Data
• Preventative Maintenance Checklists
  • Manage Preventative Maintenance Checklist Templates
  • Create Preventative Maintenance Checklist Instance by PreWork
  • Update Existing PM Checklist Instance Details
  • Complete PM Checklist Instance
  • Delete PM Checklist Instance
  • List PM Checklist Instances
  • List PM Checklist Instance Documents
  • Upload PM Checklist Instance Documents
  • Delete PM Checklist Instance Documents
• Production Orders
  • Create Production Orders
  • View Production Orders
  • Edit Production Order
  • Delete Production Order

Machine Operator

Machine Operators enter rejects and coding downtime in real time, without requiring any additional information from the system. They have read-level access to one folder with work instructions, not editing anything. They may create WOs but are not the ones completing them. They use tablets to enter and review information. The tablet stays with the machine and the machine operators login to have traceability. They are a select user, who enters a password and has limited permissions. They log out at the end of every shift.

• Plant Management
  • View "Plant-specific" or "Analytics" Dashboard
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Upload Work Order Documents
• Asset Management
  • View Asset Reports
• Production Orders
  • View Production Orders

Process Technician

Process Technicians are responsible for the press and setting up new tools. They create press WOs and can sometimes execute them. They are interested in tool idles, product countdown and product cabinet items. They also setup new jobs for the machine. Sometimes they also do the physical work of setting everything up.

• Client Hierarchy Management
  • List Plants
• Plant Management
  • View "Plant Specific" or "Analytics" Dashboard
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Work on Work Order
  • List Work Order Documents
  • Upload Work Order Documents
• Asset Management
  • List Assets
  • List Asset Documents
  • Upload Asset Documents
  • View Asset Reports
  • View Alerts
  • Acknowledge Alerts
  • Manage Operational Data
• Preventative Maintenance Checklists
  • Complete PM Checklist Instance
  • List PM Checklist Instances
  • List PM Checklist Instance Documents
  • Upload PM Checklist Instance Documents
• Production Orders
  • View Production Orders

Molding Floor Supervisor

Molding floor supervisors are responsible for making sure that all presses are running.  They are interested in PM and WO for all presses and tools. They are also interested part counts and the number of rejects being entered, if machines are running. They access the system from desktop, may also be walking around the factory. They also access documents.

• Client Hierarchy Management
  • List Plants
• Plant Management
  • Manage Opeators
  • View "Plant Specific" or "Analytics" Dashboard
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Mark Work Order Ready for Work
  • Work on Work Order
  • Grant Foreman Approval
  • Grant QC Approval
  • List Work Order Documents
  • Upload Work Order Documents
• Asset Management
  • List Assets
  • Update Assets
  • List Asset Documents
  • Upload Asset Documents
  • View Asset Reports
  • View Alerts
  • View Asset Alerts
  • Acknowledge Alerts
  • Enter Operational Data
  • Manage Operational Data
• Preventative Maintenance Checklists
  • Complete PM Checklist Instance
  • List PM Checklist Instances
  • List PM Checklist Instance Documents
  • Upload PM Checklist Instance Documents
• Production Orders
  • Create Production Orders
  • View Production Orders

Technician

There are two types of toolroom technicians: Internal, which handles maintenance and repair. They make new tools, and ensure they are running well. Normally does NOT access ProFile, but may have user access to upload documents, fill out the homepage, or to see PMs and WOs. Performs the actual work for Tool PM and Tool WO. They also diagnose OEE if tools are running poorly and they fix cavitation issues.

• Client Hierarchy Permissions
  • List Plant
• Plant Management
  • View "Plant Specific" or "Analytics" Dashboard
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Work on Work Order
  • List Work Order Documents
  • Upload Work Order Documents
• Asset Management
  • List Assets
  • List Asset Documents
  • Upload Asset Documents
  • View Alerts
  • Acknowledge Alerts
  • Manage Operational Data
• Preventative Maintenance Checklists
  • Complete PM Checklist Instance
  • List PM Checklist Instance Documents
  • Upload PM Checklist Instance Documents
• Production Orders
  • View Production Orders

Quality

Quality role is focused on review work. They review folders, upload data, work instructions, and reject reports. They sign-off on WO QC and enter rejects (historically). They also create tool WO (not usually for presses) as well as review high level metrics. They quantify quality statistics.

• Client Hierarchy Management
  • List Plants
• Plant Management
  • View "Plant-specific" or "Analytics" Dashboard
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Work on Work Order
  • Grant QC Approval
  • List Work Order Documents
  • Upload Work Order Documents
• Asset Management
  • List Assets
  • List Asset Documents
  • Upload Asset Documents
  • View Asset Reports
  • View Alerts
• Preventative Maintenance Checklists
  • Complete PM Checklist Instance
  • List PM Checklist Instance Documents
  • Upload PM Checklist Instance Documents
• Production Orders
  • View Production Orders

Plant Manager

Similar to the enterprise administrator, but for a Plant. Hitting cycle times, OEE, and PM. In a smaller shop, does WO approvals.

• Client Hierarchy Management
  • List Plants
  • Modify Plants
  • Manage Roles
  • Manage Users
• Plant Management
  • Manage Operators
  • Manage Master Data
  • View "Plant-specific" or "Analytics" Dashboard
  • Manage Asset Definitions
• Work Order Management
  • List Work Orders
  • Create Work Order
  • Delete Work Order Documents
  • Update Work Orders
  • Mark Work Order Ready for Work
  • Work on Work Order
  • Grant Foreman Approval
  • Grant QC Approval
  • List Work Order Documents
  • Upload Work Order Documents
  • Delete Work Order Documents
• Asset Management
  • List Assets
  • Update Assets
  • Change Asset location
  • List Asset Documents
  • Upload Asset Documents
  • Delete Asset Documents
  • View Asset Reports
  • View Alerts
  • Acknowledge Alerts
  • Enter Operational Data
  • Manage Operational Data
• Preventative Maintenance Checklists
  • Manage Preventative Maintenance Checklist Templates
  • Create Preventative Maintenance Checklist Instance by PreWork
  • Updating Existing PM Checklist Instance Details
  • Complete PM Checklist Instance
  • Delete PM Checklist Instance
  • List PM Checklist Instances
  • List PM Checklist Instance Documents
  • Upload PM Instance Documents
  • Delete PM Checklist Instance Documents
• Production Orders
  • Create Production Orders
  • View Production Orders
  • Edit Production Orders
  • Delete Production Order

Asset Administrator

Asset administrators handle finance and purchasing and the uploading of purchase documents. Asset administrators at the plant level, buy asset tags, apply tags to assets, and update asset records with the tag identification. If at the Enterprise level, they enter asset pages, buy the tags, and send tags to the plants.

• Client Hierarchy Management
  • List Enterprise
  • List Plants
  • Manage Users
• Plant Management
  • View "Plant Specific" or "Analytics" Dashboard
  • Manage Asset Definitions
• Work Order Management
  • List Work Orders
  • Create Work Order
  • List Work Order Documents
• Asset Management
  • List Assets
  • Update Assets
  • Change Asset Location
  • List Asset Documents
  • Upload Asset Documents
  • Delete Asset Documents
  • View Asset Reports
  • View Alerts
  • Acknowledge Alerts
  • Enter Operational Data
  • Manage Operational Data
• Preventative Maintenance Checklists
  • Create Preventative Maintenance Checklist Instance by PreWork
  • Update Existing PM Checklist Instance Details
  • List PM Checklist Instances
  • List PM Checklist Instance Documents
  • Upload PM Checklist Instance Documents
• Production Orders
  • View Production Orders

Permission Charts

At the bottom of some help desk articles there are permissions charts that relate to the topics discussed in the article. This lets users know what permissions they would need to access the features or areas of ProFile described in that particular article.

These charts illustrate the default role/permission configuration for a specific feature or area of ProFile. A green check means that the role is allowed to perform the action. A red circle means that the role cannot perform the action. Note that your experience may vary, as these roles are customizable. Please contact support if you have any specific questions.

Here is an example of a Permissions Chart (the left hand column is a list of roles, the right hand column represents the enablement of a specific permission):